type=DAEMON_START msg=audit(1780987484.157:9166): op=start ver=3.0.7 format=enriched kernel=5.14.0-284.11.1.el9_2.x86_64 auid=4294967295 pid=726 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root"
type=SERVICE_START msg=audit(1780987484.170:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987484.174:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CONFIG_CHANGE msg=audit(1780987484.213:7): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1780987484.213:7): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffcc1b9b950 a2=3c a3=0 items=0 ppid=731 pid=741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780987484.213:7): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1780987484.213:8): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1780987484.213:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffcc1b9b950 a2=3c a3=0 items=0 ppid=731 pid=741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780987484.213:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1780987484.213:9): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1780987484.213:9): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffcc1b9b950 a2=3c a3=0 items=0 ppid=731 pid=741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780987484.213:9): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=SERVICE_START msg=audit(1780987484.217:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_BOOT msg=audit(1780987484.229:11): pid=748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987484.239:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987484.411:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987484.433:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780987484.466:15): prog-id=21 op=LOAD
type=SERVICE_START msg=audit(1780987484.610:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780987484.615:17): prog-id=22 op=LOAD
type=SERVICE_START msg=audit(1780987484.631:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780987484.647:19): prog-id=23 op=LOAD
type=BPF msg=audit(1780987484.647:20): prog-id=24 op=LOAD
type=BPF msg=audit(1780987484.647:21): prog-id=25 op=LOAD
type=SERVICE_START msg=audit(1780987484.662:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987484.694:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987484.745:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987484.799:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780987486.220:26): prog-id=26 op=LOAD
type=BPF msg=audit(1780987486.220:27): prog-id=27 op=LOAD
type=SERVICE_START msg=audit(1780987486.296:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987486.382:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987486.469:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987486.491:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhsmcertd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987486.502:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987486.555:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987486.570:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987487.109:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987487.236:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_GROUP msg=audit(1780987489.085:37): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_USER msg=audit(1780987489.088:38): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1780987489.088:39): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1780987489.088:40): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1780987489.088:41): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1780987489.088:42): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1780987489.184:43): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-home-dir id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="cloud-user"
type=ACCT_LOCK msg=audit(1780987489.224:44): pid=1126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1001 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="cloud-user"
type=SERVICE_START msg=audit(1780987489.669:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987489.713:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987489.716:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987489.723:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987489.727:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987489.731:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987489.735:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_RUNLEVEL msg=audit(1780987489.748:52): pid=1150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987489.751:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780987489.751:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780987489.783:55): pid=1156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1163 suid=74 rport=13222 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780987489.783:56): pid=1156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1163 suid=74 rport=13222 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780987489.907:57): pid=1219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780987489.956:58): pid=1156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1163 suid=74 rport=13222 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780987489.957:59): pid=1156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780987489.970:60): pid=1255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1267 suid=74 rport=17527 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780987489.971:61): pid=1255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1267 suid=74 rport=17527 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780987490.043:62): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987490.068:63): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780987490.119:64): pid=1358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1367 suid=74 rport=10482 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780987490.119:65): pid=1358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1367 suid=74 rport=10482 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780987490.128:66): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780987490.142:67): pid=1255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1267 suid=74 rport=17527 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780987490.143:68): pid=1255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780987490.248:69): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1429 suid=74 rport=43303 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780987490.248:70): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1429 suid=74 rport=43303 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780987490.301:71): pid=1358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1367 suid=74 rport=10482 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780987490.302:72): pid=1358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780987490.372:73): pid=1447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1461 suid=74 rport=40468 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780987490.372:74): pid=1447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1461 suid=74 rport=40468 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780987490.424:75): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1429 suid=74 rport=43303 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780987490.425:76): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780987490.428:77): pid=1447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780987490.485:78): pid=1537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.222.39.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987490.692:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780987496.688:80): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987499.975:81): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780987516.529:82): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780987516.573:83): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780987516.573:84): prog-id=0 op=UNLOAD
type=CRYPTO_SESSION msg=audit(1780987554.266:85): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=4175 suid=74 rport=57362 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780987554.266:86): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=4175 suid=74 rport=57362 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780987554.411:87): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780987554.412:88): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ee:0a:bb:13:43:96:9a:b3:dd:37:40:85:a0:27:c3:f3:80:30:31:54:08:5d:19:7e:b3:12:cc:fe:87:db:80:1e exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780987554.435:89): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780987554.435:90): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4175 suid=74 rport=57362 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780987554.438:91): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780987554.439:92): pid=4174 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780987554.439:92): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe302ac440 a2=4 a3=3e8 items=0 ppid=1327 pid=4174 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780987554.439:92): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780987554.442:93): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1780987554.483:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780987554.516:95): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1780987554.516:96): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1780987554.516:97): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780987554.517:98): pid=4178 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780987554.517:98): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd7a6b5f80 a2=4 a3=3e8 items=0 ppid=1 pid=4178 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780987554.517:98): proctitle="(systemd)"
type=USER_START msg=audit(1780987554.519:99): pid=4178 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1780987554.644:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780987554.654:101): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1780987554.658:102): pid=4187 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780987554.702:103): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987554.702:104): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987554.745:105): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987554.745:106): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987554.759:107): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987554.759:108): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987554.835:109): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987554.835:110): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987554.850:111): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987554.850:112): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987555.240:113): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987555.241:114): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987561.830:115): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987561.831:116): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987563.522:117): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987563.522:118): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987570.471:119): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987570.471:120): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987570.859:121): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987570.859:122): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987571.815:123): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987571.815:124): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987572.031:125): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987572.031:126): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987574.332:127): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987574.332:128): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987574.587:129): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987574.587:130): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987574.994:131): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987574.994:132): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987575.206:133): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987575.206:134): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987575.556:135): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987575.556:136): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987575.585:137): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987575.585:138): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987575.599:139): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987575.599:140): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987575.637:141): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987575.637:142): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987575.648:143): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987575.648:144): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987575.681:145): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987575.681:146): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987575.705:147): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987575.705:148): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987575.904:149): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987575.904:150): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987575.927:151): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987575.927:152): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987575.970:153): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987575.970:154): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987575.981:155): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987575.981:156): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987576.014:157): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987576.014:158): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987576.025:159): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987576.025:160): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987576.260:161): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987576.260:162): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987576.277:163): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987576.277:164): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987576.309:165): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987576.309:166): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987577.170:167): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987577.170:168): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987577.203:169): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987577.203:170): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987577.213:171): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987577.213:172): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987577.253:173): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987577.253:174): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987577.270:175): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987577.270:176): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987577.299:177): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987577.299:178): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987577.315:179): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987577.315:180): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987577.507:181): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987577.507:182): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987577.547:183): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987577.547:184): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987577.582:185): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987577.582:186): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987577.595:187): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987577.595:188): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987577.629:189): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987577.629:190): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987577.645:191): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987577.645:192): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987577.886:193): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987577.887:194): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987577.901:195): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987577.901:196): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987577.932:197): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987577.932:198): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987580.178:199): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987580.178:200): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987580.337:201): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987580.338:202): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987581.723:203): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987581.723:204): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987582.420:205): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987582.421:206): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987585.618:207): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987585.618:208): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987585.833:209): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987585.833:210): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987587.495:211): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987587.495:212): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987587.675:213): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987587.675:214): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987587.701:215): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987587.701:216): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987587.895:217): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987587.895:218): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987587.925:219): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987587.925:220): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987588.139:221): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987588.139:222): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987588.967:223): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987588.967:224): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987589.182:225): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987589.182:226): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987589.209:227): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987589.209:228): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987589.434:229): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987589.434:230): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987589.457:231): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987589.457:232): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987589.648:233): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987589.648:234): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987592.393:235): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987592.393:236): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987592.474:237): pid=4777 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987592.474:238): pid=4777 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71706B776A6E736768676D636D6F78646D6D68786A616A706E6E64676E6E6C76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987592.475:239): pid=4777 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987592.482:240): pid=4777 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987592.693:241): pid=4777 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987592.694:242): pid=4777 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987592.699:243): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987592.699:244): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987592.991:245): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987592.991:246): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987593.023:247): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987593.023:248): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987593.034:249): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987593.034:250): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987593.071:251): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987593.071:252): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987593.304:253): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987593.304:254): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987593.349:255): pid=4825 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987593.349:256): pid=4825 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7165726E63636D6B7A69646479637465677561747577626D6E696B6A68687676203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987593.350:257): pid=4825 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987593.352:258): pid=4825 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987593.519:259): pid=4825 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987593.519:260): pid=4825 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987593.523:261): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987593.523:262): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987593.548:263): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987593.548:264): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987593.581:265): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987593.581:266): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987593.612:267): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987593.612:268): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987593.641:269): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987593.641:270): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987593.821:271): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987593.821:272): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987593.883:273): pid=4868 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987593.883:274): pid=4868 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6870617676686373797363706B717770746574766A6B6F7671717766726D6A66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987593.884:275): pid=4868 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987593.886:276): pid=4868 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987594.021:277): pid=4868 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987594.021:278): pid=4868 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987594.027:279): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987594.027:280): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987594.041:281): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987594.041:282): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987594.070:283): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987594.071:284): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987595.254:285): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987595.254:286): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987595.513:287): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987595.514:288): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987595.543:289): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987595.543:290): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987595.767:291): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987595.767:292): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987595.790:293): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987595.790:294): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987596.052:295): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987596.052:296): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987596.072:297): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987596.073:298): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987596.289:299): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987596.289:300): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987596.313:301): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987596.313:302): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987596.565:303): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987596.565:304): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987596.582:305): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987596.582:306): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987596.843:307): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987596.843:308): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987596.881:309): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987596.881:310): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987597.140:311): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987597.140:312): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987597.160:313): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987597.160:314): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987597.387:315): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987597.387:316): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987597.412:317): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987597.412:318): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987597.667:319): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987597.667:320): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987597.686:321): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987597.686:322): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987597.939:323): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987597.939:324): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987597.954:325): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987597.954:326): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987598.203:327): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987598.203:328): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987598.221:329): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987598.221:330): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987598.477:331): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987598.477:332): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987598.497:333): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987598.497:334): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987598.747:335): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987598.747:336): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987598.764:337): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987598.764:338): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987599.012:339): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987599.012:340): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987599.029:341): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987599.029:342): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987599.263:343): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987599.263:344): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987599.291:345): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987599.291:346): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987599.511:347): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987599.511:348): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987599.538:349): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987599.538:350): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987600.464:351): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987600.464:352): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987601.644:353): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987601.644:354): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987601.858:355): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987601.858:356): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987601.885:357): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987601.885:358): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987602.108:359): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987602.108:360): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987602.129:361): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987602.129:362): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987602.358:363): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987602.358:364): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987602.375:365): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987602.375:366): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987602.621:367): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987602.621:368): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987602.642:369): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987602.642:370): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987602.900:371): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987602.900:372): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987602.915:373): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987602.915:374): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987603.172:375): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987603.172:376): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987603.199:377): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987603.199:378): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987603.428:379): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987603.428:380): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987603.464:381): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987603.464:382): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987603.685:383): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987603.685:384): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987603.722:385): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987603.723:386): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987603.957:387): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987603.957:388): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987611.504:389): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987611.504:390): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987611.561:391): pid=5263 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987611.561:392): pid=5263 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62786F766A646565756375667576636D68766B65667970676677797670637770203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987611.562:393): pid=5263 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987611.565:394): pid=5263 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1780987611.768:395): prog-id=28 op=LOAD
type=BPF msg=audit(1780987611.768:396): prog-id=29 op=LOAD
type=BPF msg=audit(1780987611.768:397): prog-id=30 op=LOAD
type=SERVICE_START msg=audit(1780987611.823:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780987611.882:399): pid=5263 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987611.882:400): pid=5263 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987611.887:401): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987611.887:402): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987612.422:403): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987612.422:404): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987612.482:405): pid=5284 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987612.482:406): pid=5284 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65686D6262737069637A776B787863706E776C65797679777270747768676969203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987612.483:407): pid=5284 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987612.487:408): pid=5284 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987612.675:409): pid=5284 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987612.676:410): pid=5284 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987612.680:411): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987612.680:412): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987613.066:413): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987613.066:414): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987613.098:415): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987613.098:416): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987613.109:417): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987613.109:418): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987613.145:419): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987613.145:420): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987613.159:421): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987613.159:422): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987613.363:423): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987613.363:424): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987613.385:425): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987613.385:426): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987613.422:427): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987613.422:428): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987613.435:429): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987613.435:430): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987613.462:431): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987613.462:432): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987613.475:433): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987613.475:434): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987613.641:435): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987613.641:436): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987613.653:437): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987613.653:438): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987613.681:439): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987613.681:440): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987614.555:441): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987614.555:442): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987614.588:443): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987614.588:444): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987614.597:445): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987614.597:446): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987614.636:447): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987614.636:448): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987614.661:449): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987614.661:450): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987614.973:451): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987614.973:452): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987615.003:453): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987615.003:454): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987615.036:455): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987615.036:456): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987615.053:457): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987615.053:458): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987615.086:459): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987615.086:460): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987615.104:461): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987615.104:462): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987615.294:463): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987615.294:464): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987615.311:465): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987615.311:466): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987615.348:467): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987615.348:468): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987616.543:469): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987616.543:470): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987616.576:471): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987616.576:472): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987616.593:473): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987616.593:474): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987616.632:475): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987616.632:476): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987616.648:477): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987616.648:478): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987616.708:479): pid=5534 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987616.708:480): pid=5534 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726679717670666569657777687A6469756F6C67697370746F746F7376667077203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987616.710:481): pid=5534 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987616.712:482): pid=5534 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987616.888:483): pid=5534 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987616.889:484): pid=5534 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987616.893:485): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987616.893:486): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987616.911:487): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987616.911:488): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987616.949:489): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987616.949:490): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987616.962:491): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987616.962:492): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987616.995:493): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987616.995:494): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987617.007:495): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987617.008:496): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987617.070:497): pid=5577 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987617.071:498): pid=5577 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716C7766737177616569746A7162636668776B7461657777656169646C777573203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987617.071:499): pid=5577 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987617.074:500): pid=5577 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987617.254:501): pid=5577 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987617.255:502): pid=5577 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987617.259:503): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987617.259:504): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987617.271:505): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987617.271:506): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987617.300:507): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987617.300:508): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987618.381:509): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987618.381:510): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987618.589:511): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987618.589:512): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987618.617:513): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987618.617:514): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987618.840:515): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987618.840:516): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987619.620:517): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987619.621:518): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987619.649:519): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987619.649:520): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987619.670:521): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987619.671:522): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987619.706:523): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987619.706:524): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987619.721:525): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987619.722:526): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987619.786:527): pid=5671 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987619.786:528): pid=5671 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A6F7679726A64737A6F76706F79696D6C62636B79677A7A6873646A737965203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987619.787:529): pid=5671 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987619.791:530): pid=5671 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987619.962:531): pid=5671 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987619.962:532): pid=5671 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987619.967:533): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987619.967:534): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987620.002:535): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987620.002:536): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987620.036:537): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987620.036:538): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987620.053:539): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987620.053:540): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987620.086:541): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987620.086:542): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987620.109:543): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987620.109:544): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987620.168:545): pid=5714 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987620.169:546): pid=5714 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A70656D6966777568746D61777A7076667479686C616B6C62776F6872786964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987620.169:547): pid=5714 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987620.172:548): pid=5714 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987620.346:549): pid=5714 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987620.346:550): pid=5714 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987620.351:551): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987620.351:552): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987620.363:553): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987620.364:554): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987620.397:555): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987620.398:556): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987621.487:557): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987621.487:558): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987621.545:559): pid=5745 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987621.546:560): pid=5745 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766B6A776C6F6A66627277677868706A6B76747965627277796B6F6669756D75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987621.546:561): pid=5745 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987621.549:562): pid=5745 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987621.750:563): pid=5745 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987621.750:564): pid=5745 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987621.754:565): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987621.754:566): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987622.560:567): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987622.561:568): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987622.765:569): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987622.765:570): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987624.364:571): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987624.364:572): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987624.577:573): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987624.577:574): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1780987641.896:575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780987641.906:576): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780987641.906:577): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780987641.906:578): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1780987645.435:579): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987645.435:580): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987645.488:581): pid=5800 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987645.488:582): pid=5800 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F66736B68657A687A78616A6669706461726E656D657A677A627A6C66656D6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987645.489:583): pid=5800 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987645.491:584): pid=5800 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987645.650:585): pid=5800 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987645.650:586): pid=5800 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987645.654:587): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987645.654:588): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780987705.712:589): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4187 suid=1000 rport=57362 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780987705.718:590): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780987705.718:591): pid=4174 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1780987722.937:592): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=5809 suid=74 rport=37676 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780987722.937:593): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=5809 suid=74 rport=37676 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780987722.993:594): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780987722.997:595): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780987723.025:596): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780987723.025:597): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780987723.054:598): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780987723.054:599): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5809 suid=74 rport=37676 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780987723.057:600): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780987723.058:601): pid=5808 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780987723.058:601): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc691872b0 a2=4 a3=3e8 items=0 ppid=1327 pid=5808 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780987723.058:601): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780987723.059:602): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1780987723.079:603): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1780987723.082:604): pid=5811 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780987723.125:605): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987723.125:606): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987723.338:607): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987723.338:608): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987736.071:609): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987736.071:610): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987736.106:611): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987736.106:612): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987736.123:613): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987736.123:614): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987736.162:615): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987736.163:616): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987736.220:617): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987736.221:618): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987736.291:619): pid=5874 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987736.291:620): pid=5874 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7875786D7A66646F617976646D666973636176756975727A74786872676A76203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987736.292:621): pid=5874 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987736.297:622): pid=5874 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987736.457:623): pid=5874 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987736.457:624): pid=5874 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987736.462:625): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987736.462:626): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987736.487:627): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987736.487:628): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987736.528:629): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987736.528:630): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987736.546:631): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987736.546:632): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987736.576:633): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987736.576:634): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987736.596:635): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987736.596:636): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987736.658:637): pid=5917 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987736.658:638): pid=5917 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65706C77776B6D7369707270646A6778706D6A65656F65776271686E62756268203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987736.659:639): pid=5917 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987736.662:640): pid=5917 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987736.832:641): pid=5917 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987736.833:642): pid=5917 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987736.837:643): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987736.837:644): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987736.853:645): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987736.854:646): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987736.884:647): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987736.885:648): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987737.007:649): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987737.007:650): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987737.066:651): pid=5947 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987737.067:652): pid=5947 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78736D626F636C636B687766656E777567656C68776A63656363706D7A64726C203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987737.067:653): pid=5947 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987737.071:654): pid=5947 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1780987737.359:655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987737.399:656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780987737.410:657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987737.449:658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780987737.465:659): prog-id=31 op=LOAD
type=BPF msg=audit(1780987737.465:660): prog-id=32 op=LOAD
type=USER_END msg=audit(1780987737.473:661): pid=5947 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987737.473:662): pid=5947 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987737.479:663): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987737.480:664): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1780987737.537:665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780987737.615:666): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987737.615:667): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987737.799:668): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987737.799:669): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1780987747.694:670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780987767.576:671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780987767.617:672): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780987767.617:673): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780987782.798:674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780987782.807:675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780987792.853:676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780987797.838:677): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5811 suid=1000 rport=37676 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780987797.843:678): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780987797.843:679): pid=5808 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1780987926.878:680): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6058 suid=74 rport=47844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780987926.878:681): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6058 suid=74 rport=47844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780987926.932:682): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780987926.937:683): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780987926.964:684): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780987926.964:685): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780987926.987:686): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780987926.988:687): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6058 suid=74 rport=47844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780987926.991:688): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780987926.991:689): pid=6057 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=4 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780987926.991:689): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd89447fe0 a2=4 a3=3e8 items=0 ppid=1327 pid=6057 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780987926.991:689): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780987926.993:690): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1780987927.016:691): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1780987927.018:692): pid=6060 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780987927.062:693): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987927.062:694): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987927.092:695): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987927.092:696): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987927.108:697): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987927.108:698): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987927.143:699): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987927.143:700): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987927.154:701): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987927.154:702): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987927.218:703): pid=6106 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987927.219:704): pid=6106 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A777A7867776F7772706E6667706A7366646675786766696D69706C6962716B203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987927.220:705): pid=6106 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987927.224:706): pid=6106 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987927.404:707): pid=6106 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987927.405:708): pid=6106 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987927.409:709): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987927.409:710): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987927.436:711): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987927.436:712): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987927.478:713): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987927.478:714): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987927.495:715): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987927.495:716): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987927.529:717): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987927.529:718): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987927.547:719): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987927.547:720): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780987927.608:721): pid=6149 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780987927.608:722): pid=6149 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6865726F66776B66726664717A6277646E6F787177666C6F616F66796A6D6A70203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780987927.608:723): pid=6149 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780987927.612:724): pid=6149 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987927.809:725): pid=6149 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780987927.809:726): pid=6149 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780987927.814:727): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987927.814:728): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780987927.830:729): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780987927.830:730): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780987927.862:731): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780987927.862:732): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780987931.906:733): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6060 suid=1000 rport=47844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780987931.909:734): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780987931.910:735): pid=6057 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1780988380.199:736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780988380.199:737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780988567.293:738): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6188 suid=74 rport=50652 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780988567.293:739): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6188 suid=74 rport=50652 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780988567.348:740): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780988567.352:741): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780988567.375:742): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780988567.375:743): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780988567.403:744): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780988567.403:745): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6188 suid=74 rport=50652 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780988567.406:746): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780988567.406:747): pid=6187 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=5 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780988567.406:747): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc486d8670 a2=4 a3=3e8 items=0 ppid=1327 pid=6187 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780988567.406:747): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780988567.408:748): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1780988567.427:749): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1780988567.429:750): pid=6191 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780988567.473:751): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988567.473:752): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988567.540:753): pid=6205 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988567.541:754): pid=6205 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A647366766C6C757863696B6E776F646C7A646C6672616B717369756F7569203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988567.542:755): pid=6205 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988567.546:756): pid=6205 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988567.718:757): pid=6205 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988567.718:758): pid=6205 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988567.723:759): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988567.723:760): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988568.894:761): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988568.894:762): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988568.958:763): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988568.958:764): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726A6F74676B6E6C706A636471767666617875706971787469656D6C75726D6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988568.959:765): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988568.962:766): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988569.186:767): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988569.186:768): pid=6224 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988569.190:769): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988569.190:770): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988569.213:771): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988569.213:772): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988569.266:773): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988569.266:774): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647073676F6765736D6374626E737763766A67626A67756B7A6476677364656D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988569.267:775): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988569.270:776): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988569.451:777): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988569.451:778): pid=6240 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988569.456:779): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988569.456:780): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988569.484:781): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988569.484:782): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988569.540:783): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988569.541:784): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64616E636A76617870747670697861737261697269766A6D6E6C6D787663746C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988569.541:785): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988569.544:786): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988569.693:787): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988569.693:788): pid=6256 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988569.697:789): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988569.697:790): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988569.719:791): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988569.719:792): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988569.768:793): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988569.768:794): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74727471686B736A786D736377667268796C646F676A73796C6979746D6E7262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988569.769:795): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988569.771:796): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988569.943:797): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988569.943:798): pid=6272 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988569.949:799): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988569.949:800): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988571.131:801): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988571.131:802): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988571.194:803): pid=6288 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988571.194:804): pid=6288 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E716C6C6F666366756165757473757A686179616A6E75736E7A6A64746D7779203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988571.195:805): pid=6288 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988571.198:806): pid=6288 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988571.346:807): pid=6288 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988571.347:808): pid=6288 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988571.351:809): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988571.351:810): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988571.775:811): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988571.775:812): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988571.809:813): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988571.809:814): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988571.825:815): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988571.826:816): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988571.866:817): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988571.866:818): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988571.891:819): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988571.892:820): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988571.955:821): pid=6336 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988571.955:822): pid=6336 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A627A6C6F77786861726377726C726D736275686D63616F6D656166786B697A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988571.956:823): pid=6336 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988571.959:824): pid=6336 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988572.122:825): pid=6336 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988572.123:826): pid=6336 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988572.126:827): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988572.127:828): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988572.157:829): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988572.157:830): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988572.199:831): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988572.200:832): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988572.217:833): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988572.217:834): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988572.248:835): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988572.249:836): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988572.266:837): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988572.266:838): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988572.327:839): pid=6379 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988572.327:840): pid=6379 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797371617A7077747961626366617A676A70716661757561757069676D787062203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988572.328:841): pid=6379 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988572.332:842): pid=6379 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988572.500:843): pid=6379 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988572.500:844): pid=6379 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988572.504:845): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988572.504:846): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988572.522:847): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988572.522:848): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988572.555:849): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988572.556:850): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988573.821:851): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988573.821:852): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988573.876:853): pid=6409 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988573.877:854): pid=6409 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63666E6E61706E686979647068736B6A6D6363647464667467616562746A636C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988573.877:855): pid=6409 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988573.880:856): pid=6409 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1780988574.368:857): prog-id=33 op=LOAD
type=BPF msg=audit(1780988574.368:858): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988574.369:859): prog-id=34 op=LOAD
type=BPF msg=audit(1780988574.369:860): prog-id=35 op=LOAD
type=BPF msg=audit(1780988574.369:861): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988574.369:862): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988574.372:863): prog-id=36 op=LOAD
type=BPF msg=audit(1780988574.372:864): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988574.372:865): prog-id=37 op=LOAD
type=BPF msg=audit(1780988574.373:866): prog-id=38 op=LOAD
type=BPF msg=audit(1780988574.373:867): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988574.373:868): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988574.375:869): prog-id=39 op=LOAD
type=BPF msg=audit(1780988574.375:870): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988574.375:871): prog-id=40 op=LOAD
type=BPF msg=audit(1780988574.375:872): prog-id=41 op=LOAD
type=BPF msg=audit(1780988574.375:873): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988574.375:874): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988574.375:875): prog-id=42 op=LOAD
type=BPF msg=audit(1780988574.375:876): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780988574.407:877): pid=6409 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988574.407:878): pid=6409 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988574.411:879): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988574.411:880): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1780988574.985:881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780988574.985:882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780988575.930:883): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988575.930:884): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988575.997:885): pid=6456 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988575.997:886): pid=6456 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687762776364777464776D65787176686A686765636776656863716B7A757A74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988575.999:887): pid=6456 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988576.003:888): pid=6456 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988576.163:889): pid=6456 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988576.163:890): pid=6456 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988576.167:891): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988576.168:892): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988576.610:893): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988576.610:894): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988576.667:895): pid=6472 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988576.667:896): pid=6472 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70666969726B686968616D6A71647477746875667066676C616A636164686965203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988576.668:897): pid=6472 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988576.670:898): pid=6472 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988576.851:899): pid=6472 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988576.851:900): pid=6472 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988576.855:901): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988576.856:902): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988576.889:903): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988576.889:904): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988576.951:905): pid=6490 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988576.952:906): pid=6490 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6364707670656B687775706A63767272706E737167787A6B63696B6E7A7872203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988576.952:907): pid=6490 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988576.955:908): pid=6490 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988577.121:909): pid=6490 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988577.122:910): pid=6490 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988577.126:911): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988577.126:912): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988577.147:913): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988577.148:914): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988577.199:915): pid=6508 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988577.199:916): pid=6508 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6578766B6A74696C7768637370706D716F787A75787569706F64776265786664203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988577.200:917): pid=6508 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988577.202:918): pid=6508 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988577.350:919): pid=6508 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988577.351:920): pid=6508 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988577.355:921): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988577.355:922): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988577.389:923): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988577.389:924): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988577.436:925): pid=6526 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988577.436:926): pid=6526 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747A626E68617675657574636A6F6A706B6F6E69666961686C637469706D6C67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988577.437:927): pid=6526 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988577.440:928): pid=6526 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988577.592:929): pid=6526 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988577.592:930): pid=6526 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988577.596:931): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988577.597:932): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988579.011:933): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988579.011:934): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988579.227:935): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988579.227:936): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988579.979:937): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988579.979:938): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988580.191:939): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988580.191:940): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780988583.381:941): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6191 suid=1000 rport=50652 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780988583.387:942): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780988583.388:943): pid=6187 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1780988661.481:944): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6572 suid=74 rport=55532 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780988661.481:945): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6572 suid=74 rport=55532 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780988661.533:946): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780988661.538:947): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780988661.628:948): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780988661.629:949): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780988661.648:950): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780988661.648:951): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6572 suid=74 rport=55532 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780988661.650:952): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780988661.650:953): pid=6571 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780988661.650:953): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc3cbf23e0 a2=4 a3=3e8 items=0 ppid=1327 pid=6571 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780988661.650:953): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780988661.652:954): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1780988661.669:955): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1780988661.672:956): pid=6574 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780988661.716:957): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988661.716:958): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988661.772:959): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988661.772:960): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B666461656F707065726166787274636B7875726B6A6D737A736F6A66717365203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988661.772:961): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988661.776:962): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1780988662.559:963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhsm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780988666.858:964): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988666.858:965): pid=6588 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988666.862:966): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988666.862:967): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988671.009:968): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988671.009:969): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988671.215:970): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988671.216:971): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988671.711:972): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988671.711:973): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988671.773:974): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988671.773:975): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76636A727A6966666D6D62746367656A69676662647A76687A66667879616371203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988671.774:976): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988671.778:977): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=MAC_CONFIG_CHANGE msg=audit(1780988701.847:978): bool=virt_use_nfs val=1 old_val=0 auid=1000 ses=6AUID="zuul"
type=SYSCALL msg=audit(1780988701.847:978): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7ffff6f7b9ae a2=2 a3=0 items=0 ppid=6780 pid=6781 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780988701.847:978): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50002D4E00766972745F7573655F6E66733D3100766972745F73616E64626F785F7573655F616C6C5F636170733D31
type=MAC_POLICY_LOAD msg=audit(1780988711.747:979): auid=1000 ses=6 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1780988711.747:979): arch=c000003e syscall=1 success=yes exit=3537292 a0=4 a1=7f6a95800000 a2=35f98c a3=0 items=0 ppid=6780 pid=6795 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780988711.747:979): proctitle="/usr/sbin/load_policy"
type=SERVICE_START msg=audit(1780988724.785:980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r738f318661a84c4f98876e9999aaa5b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780988725.035:981): prog-id=43 op=LOAD
type=BPF msg=audit(1780988725.035:982): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988725.035:983): prog-id=44 op=LOAD
type=BPF msg=audit(1780988725.035:984): prog-id=45 op=LOAD
type=BPF msg=audit(1780988725.035:985): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988725.035:986): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988725.038:987): prog-id=46 op=LOAD
type=BPF msg=audit(1780988725.038:988): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988725.038:989): prog-id=47 op=LOAD
type=BPF msg=audit(1780988725.038:990): prog-id=48 op=LOAD
type=BPF msg=audit(1780988725.038:991): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988725.038:992): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988725.040:993): prog-id=49 op=LOAD
type=BPF msg=audit(1780988725.040:994): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988725.040:995): prog-id=50 op=LOAD
type=BPF msg=audit(1780988725.040:996): prog-id=51 op=LOAD
type=BPF msg=audit(1780988725.040:997): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988725.040:998): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780988725.041:999): prog-id=52 op=LOAD
type=BPF msg=audit(1780988725.041:1000): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1001): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnftnl-1.2.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1002): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="container-selinux-3:2.229.0-1.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1003): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="protobuf-c-1.3.3-12.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1004): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-libs-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1005): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-1.8.8-6.el9_1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1006): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nftables-1:1.0.4-10.el9_1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1007): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="shadow-utils-subid-2:4.9-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1008): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-common-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1009): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1010): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-overlayfs-1.11-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1011): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="conmon-2:2.1.7-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1012): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="aardvark-dns-2:1.5.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1013): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="netavark-2:1.5.1-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1014): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="yajl-2.1.0-21.el9_0.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1015): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnet-1.2-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.071:1016): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="criu-3.17-5.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.072:1017): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="criu-libs-3.17-5.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.072:1018): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="crun-1.8.4-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.072:1019): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libslirp-4.4.0-7.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.072:1020): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="slirp4netns-1.2.0-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.072:1021): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="containers-common-2:1-52.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780988725.072:1022): pid=6705 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="podman-2:4.4.1-22.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_END msg=audit(1780988726.639:1023): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988726.640:1024): pid=6703 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988726.645:1025): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988726.645:1026): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988727.047:1027): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988727.047:1028): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988727.102:1029): pid=10359 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988727.102:1030): pid=10359 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67617462667876706D6F6E6366776972776E6B737A736179776672796379666A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988727.104:1031): pid=10359 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988727.112:1032): pid=10359 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988727.779:1033): pid=10359 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988727.779:1034): pid=10359 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988727.784:1035): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988727.784:1036): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988727.805:1037): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988727.805:1038): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988728.587:1039): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988728.587:1040): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780988728.967:1041): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6574 suid=1000 rport=55532 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780988728.971:1042): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780988728.971:1043): pid=6571 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1780988732.533:1044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780988732.533:1045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780988732.535:1046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r738f318661a84c4f98876e9999aaa5b8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780988750.931:1047): pid=18437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780988750.933:1048): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18443 suid=74 rport=60972 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780988750.934:1049): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18443 suid=74 rport=60972 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780988750.943:1050): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18443 suid=74 rport=60972 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780988750.944:1051): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780988750.946:1052): pid=18439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18444 suid=74 rport=60984 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780988750.946:1053): pid=18439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18444 suid=74 rport=60984 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780988750.949:1054): pid=18439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18444 suid=74 rport=60984 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780988750.950:1055): pid=18439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780988750.952:1056): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780988750.955:1057): pid=18438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780988755.254:1058): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18448 suid=74 rport=32816 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780988755.254:1059): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18448 suid=74 rport=32816 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780988755.307:1060): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780988755.311:1061): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780988755.338:1062): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780988755.338:1063): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780988755.365:1064): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780988755.365:1065): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18448 suid=74 rport=32816 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780988755.368:1066): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780988755.368:1067): pid=18447 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=7 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780988755.368:1067): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd2e5e25a0 a2=4 a3=3e8 items=0 ppid=1327 pid=18447 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780988755.368:1067): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780988755.370:1068): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1780988755.387:1069): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1780988755.390:1070): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780988755.432:1071): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988755.432:1072): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988755.648:1073): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988755.648:1074): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988756.284:1075): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988756.284:1076): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988756.352:1077): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988756.352:1078): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627975647270626466627773696F65636F6B69787868656671777577666B6170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988756.354:1079): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988756.359:1080): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988756.573:1081): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988756.573:1082): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988756.578:1083): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988756.578:1084): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780988758.079:1085): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18450 suid=1000 rport=32816 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780988758.082:1086): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780988758.082:1087): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1780988853.978:1088): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18485 suid=74 rport=54050 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780988853.978:1089): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18485 suid=74 rport=54050 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780988854.031:1090): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780988854.036:1091): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780988854.081:1092): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780988854.081:1093): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780988854.097:1094): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780988854.097:1095): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18485 suid=74 rport=54050 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780988854.099:1096): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780988854.100:1097): pid=18484 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=8 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780988854.100:1097): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff75d73740 a2=4 a3=3e8 items=0 ppid=1327 pid=18484 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780988854.100:1097): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780988854.102:1098): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1780988854.119:1099): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1780988854.121:1100): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780988854.164:1101): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988854.164:1102): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988854.225:1103): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988854.225:1104): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7964667A71796472736776726A726161767971737672736572666C6F6D626C67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988854.226:1105): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988854.229:1106): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988854.448:1107): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988854.448:1108): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988854.452:1109): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988854.452:1110): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988855.299:1111): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988855.299:1112): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988855.357:1113): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988855.357:1114): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6173636E6C676C73646863666C6D667271647A72666D7963747A6E696C726E77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988855.357:1115): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988855.360:1116): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988855.569:1117): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988855.570:1118): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988855.575:1119): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988855.575:1120): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988856.081:1121): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988856.081:1122): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988856.110:1123): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988856.110:1124): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988856.123:1125): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988856.123:1126): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988856.155:1127): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988856.155:1128): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988856.258:1129): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988856.258:1130): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988856.314:1131): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988856.314:1132): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62747272706A756F6275797964637867726E7A706F72666D6A6669796A666969203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988856.315:1133): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988856.318:1134): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988856.458:1135): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988856.458:1136): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988856.462:1137): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988856.462:1138): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988856.486:1139): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988856.487:1140): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988856.521:1141): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988856.522:1142): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988856.533:1143): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988856.533:1144): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988856.564:1145): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988856.564:1146): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988856.670:1147): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988856.670:1148): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988856.730:1149): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988856.730:1150): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6861726C6765686A73716A667266777068756F6C6C656F757A62746262666D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988856.731:1151): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988856.733:1152): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988856.897:1153): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988856.897:1154): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988856.901:1155): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988856.901:1156): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988856.927:1157): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988856.927:1158): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988856.958:1159): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988856.958:1160): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988857.907:1161): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988857.907:1162): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988857.937:1163): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988857.937:1164): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988857.949:1165): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988857.950:1166): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988857.990:1167): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988857.990:1168): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988858.003:1169): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988858.003:1170): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988858.064:1171): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988858.064:1172): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6166716F706D6279716F6B6C75796B7072737062666B78676F686E776A727862203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988858.065:1173): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988858.068:1174): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988858.231:1175): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988858.232:1176): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988858.236:1177): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988858.236:1178): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988858.265:1179): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988858.265:1180): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988858.308:1181): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988858.308:1182): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988858.331:1183): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988858.331:1184): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988858.362:1185): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988858.363:1186): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988858.387:1187): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988858.387:1188): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988858.446:1189): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988858.446:1190): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76636B776B63616F6E626861796F6D756C6F646B7766626A69726B6D7A6F7879203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988858.447:1191): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988858.449:1192): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988858.631:1193): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988858.631:1194): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988858.636:1195): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988858.636:1196): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988858.652:1197): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988858.652:1198): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988858.681:1199): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988858.681:1200): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988860.206:1201): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988860.206:1202): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780988860.270:1203): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780988860.270:1204): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6564676B796B76696166756B73756F617069736370686D7871777963706D7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780988860.271:1205): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780988860.274:1206): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988860.460:1207): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780988860.460:1208): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780988860.464:1209): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988860.464:1210): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988860.782:1211): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988860.782:1212): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988860.818:1213): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988860.818:1214): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988860.851:1215): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988860.851:1216): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988860.889:1217): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988860.889:1218): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988860.904:1219): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988860.904:1220): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988861.113:1221): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988861.114:1222): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988861.137:1223): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988861.138:1224): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988861.339:1225): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988861.339:1226): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988861.357:1227): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988861.357:1228): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988861.389:1229): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988861.390:1230): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988862.144:1231): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988862.144:1232): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988862.176:1233): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988862.176:1234): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988862.194:1235): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988862.194:1236): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988862.235:1237): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988862.235:1238): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988862.256:1239): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988862.256:1240): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988862.469:1241): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988862.469:1242): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988862.491:1243): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988862.491:1244): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988862.686:1245): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988862.686:1246): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988862.707:1247): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988862.707:1248): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988862.737:1249): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988862.737:1250): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988863.924:1251): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988863.925:1252): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988863.954:1253): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988863.954:1254): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988863.971:1255): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988863.971:1256): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988864.003:1257): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988864.003:1258): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988864.018:1259): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988864.018:1260): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988864.235:1261): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988864.235:1262): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988864.251:1263): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988864.251:1264): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988864.452:1265): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988864.453:1266): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780988864.470:1267): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780988864.470:1268): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780988864.503:1269): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780988864.503:1270): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780988865.343:1271): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18487 suid=1000 rport=54050 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780988865.345:1272): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780988865.346:1273): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1780988959.071:1274): pid=18976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18977 suid=74 rport=60802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780988959.072:1275): pid=18976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18977 suid=74 rport=60802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780988959.622:1276): pid=18976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18977 suid=74 rport=60802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780988959.624:1277): pid=18976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.151 addr=45.148.10.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780988959.625:1278): pid=18976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780989007.696:1279): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18979 suid=74 rport=50300 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780989007.696:1280): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18979 suid=74 rport=50300 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780989007.760:1281): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780989007.760:1282): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780989007.787:1283): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.182 addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780989007.788:1284): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18979 suid=74 rport=50300 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780989007.790:1285): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.182 addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780989007.791:1286): pid=18978 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=9 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780989007.791:1286): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdbdff3c00 a2=4 a3=3e8 items=0 ppid=1327 pid=18978 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780989007.791:1286): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780989007.793:1287): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.182 addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1780989007.810:1288): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.182 addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1780989007.813:1289): pid=18981 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.182 addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780989007.855:1290): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989007.855:1291): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780989007.892:1292): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989007.892:1293): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989007.910:1294): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989007.910:1295): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780989007.994:1296): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989007.994:1297): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989008.011:1298): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989008.011:1299): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780989008.215:1300): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989008.215:1301): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780989307.571:1302): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18981 suid=1000 rport=50300 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.182 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780989307.574:1303): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.182 addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780989307.575:1304): pid=18978 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.182 addr=38.102.83.182 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1780989317.631:1305): pid=19028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19029 suid=74 rport=61048 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780989317.631:1306): pid=19028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19029 suid=74 rport=61048 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780989318.181:1307): pid=19028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19029 suid=74 rport=61048 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780989318.182:1308): pid=19028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.141 addr=45.148.10.141 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780989318.183:1309): pid=19028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.141 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780989676.206:1310): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19032 suid=74 rport=64646 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780989676.207:1311): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19032 suid=74 rport=64646 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780989676.806:1312): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19032 suid=74 rport=64646 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780989676.807:1313): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.147 addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780989676.808:1314): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780989788.733:1315): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19037 suid=74 rport=46476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780989788.733:1316): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19037 suid=74 rport=46476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780989788.788:1317): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780989788.793:1318): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780989788.864:1319): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780989788.864:1320): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780989788.893:1321): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780989788.894:1322): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19037 suid=74 rport=46476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780989788.896:1323): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780989788.896:1324): pid=19036 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=10 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780989788.896:1324): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc70691e60 a2=4 a3=3e8 items=0 ppid=1327 pid=19036 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780989788.896:1324): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780989788.897:1325): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1780989788.913:1326): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1780989788.915:1327): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780989788.958:1328): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989788.958:1329): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780989789.198:1330): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989789.198:1331): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989789.803:1332): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989789.803:1333): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989789.868:1334): pid=19071 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989789.869:1335): pid=19071 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6374666F6B766C6A6D64786E667965667572666E7A6C667865756166686E716F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989789.869:1336): pid=19071 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989789.872:1337): pid=19071 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989792.681:1338): pid=19071 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989792.682:1339): pid=19071 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989792.686:1340): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989792.686:1341): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989793.097:1342): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989793.097:1343): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989793.161:1344): pid=19090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989793.161:1345): pid=19090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72657774727572796A76626C6E7A6F63617469696B6466716E7172786C656975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989793.162:1346): pid=19090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989793.165:1347): pid=19090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989822.575:1348): pid=19090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989822.575:1349): pid=19090 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989822.580:1350): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989822.580:1351): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989822.913:1352): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989822.913:1353): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989822.971:1354): pid=19246 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989822.971:1355): pid=19246 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7863756F6275646165707477777062796D716E7875636E737667746D6E626C71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989822.972:1356): pid=19246 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989822.975:1357): pid=19246 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989828.807:1358): pid=19246 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989828.807:1359): pid=19246 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989828.811:1360): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989828.811:1361): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989828.999:1362): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989828.999:1363): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989829.064:1364): pid=19388 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989829.064:1365): pid=19388 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747376786C78797A7761666F6770686A7A75736568787675636A7A6E67627264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989829.066:1366): pid=19388 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989829.069:1367): pid=19388 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989843.971:1368): pid=19388 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989843.972:1369): pid=19388 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989843.975:1370): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989843.975:1371): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989844.862:1372): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989844.862:1373): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989844.923:1374): pid=19723 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989844.923:1375): pid=19723 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696C6979697876786D746F7075747065646D626A6368626D7677726D6C6B666F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989844.924:1376): pid=19723 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989844.927:1377): pid=19723 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989860.354:1378): pid=19723 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989860.355:1379): pid=19723 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989860.360:1380): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989860.360:1381): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989860.800:1382): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989860.800:1383): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989860.859:1384): pid=20059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989860.859:1385): pid=20059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7473707965696B796E726F7379686A6572716A636375676F766A7A6A78767577203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989860.860:1386): pid=20059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989860.863:1387): pid=20059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989877.056:1388): pid=20059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989877.057:1389): pid=20059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989877.061:1390): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989877.061:1391): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989877.807:1392): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989877.807:1393): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989877.864:1394): pid=20397 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989877.864:1395): pid=20397 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79767564697965756D7777676B627464776769646C78636F7A7265736265776B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989877.865:1396): pid=20397 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989877.867:1397): pid=20397 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989880.374:1398): pid=20397 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989880.374:1399): pid=20397 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989880.379:1400): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989880.379:1401): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989881.244:1402): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989881.244:1403): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989881.305:1404): pid=20416 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989881.305:1405): pid=20416 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7179796572686F6174636F717971666E656371647263636B7362756A716F7970203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989881.306:1406): pid=20416 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989881.308:1407): pid=20416 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=MAC_POLICY_LOAD msg=audit(1780989903.643:1408): auid=1000 ses=10 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1780989903.643:1408): arch=c000003e syscall=1 success=yes exit=3540283 a0=4 a1=7f107e600000 a2=36053b a3=0 items=0 ppid=20515 pid=20522 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780989903.643:1408): proctitle="/usr/sbin/load_policy"
type=ADD_GROUP msg=audit(1780989903.937:1409): pid=20525 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="unbound"
type=GRP_MGMT msg=audit(1780989903.941:1410): pid=20525 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="unbound"
type=ADD_USER msg=audit(1780989903.995:1411): pid=20532 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="unbound" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=ADD_GROUP msg=audit(1780989904.174:1412): pid=20545 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="openvswitch"
type=GRP_MGMT msg=audit(1780989904.178:1413): pid=20545 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="openvswitch"
type=ADD_USER msg=audit(1780989904.231:1414): pid=20552 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="openvswitch" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=ADD_GROUP msg=audit(1780989904.306:1415): pid=20560 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="hugetlbfs"
type=GRP_MGMT msg=audit(1780989904.311:1416): pid=20560 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="hugetlbfs"
type=USER_MGMT msg=audit(1780989904.359:1417): pid=20568 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_MGMT msg=audit(1780989904.359:1418): pid=20568 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1780989907.052:1419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rb1152e73d9874a40bdec52757622a15d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780989907.293:1420): prog-id=53 op=LOAD
type=BPF msg=audit(1780989907.293:1421): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780989907.293:1422): prog-id=54 op=LOAD
type=BPF msg=audit(1780989907.293:1423): prog-id=55 op=LOAD
type=BPF msg=audit(1780989907.293:1424): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780989907.293:1425): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780989907.296:1426): prog-id=56 op=LOAD
type=BPF msg=audit(1780989907.296:1427): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780989907.296:1428): prog-id=57 op=LOAD
type=BPF msg=audit(1780989907.296:1429): prog-id=58 op=LOAD
type=BPF msg=audit(1780989907.296:1430): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780989907.296:1431): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780989907.298:1432): prog-id=59 op=LOAD
type=BPF msg=audit(1780989907.298:1433): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780989907.298:1434): prog-id=60 op=LOAD
type=BPF msg=audit(1780989907.298:1435): prog-id=61 op=LOAD
type=BPF msg=audit(1780989907.298:1436): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780989907.298:1437): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780989907.298:1438): prog-id=62 op=LOAD
type=BPF msg=audit(1780989907.299:1439): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1440): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-netaddr-0.8.0-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1441): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-iso8601-0.1.12-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1442): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="NetworkManager-config-server-1:1.42.2-32.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1443): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyparsing-2.4.7-9.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1444): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="chkconfig-1.20-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1445): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="git-core-2.39.5-1.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1446): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pbr-5.5.1-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1447): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="NetworkManager-ovs-1:1.42.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1448): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-packaging-20.9-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1449): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nmstate-libs-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1450): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-libnmstate-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1451): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-zipp-3.4.0-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1452): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-importlib-metadata-1.7.0-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1453): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-stevedore-3.3.3-17.1.20230621041426.7b48fff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1454): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wrapt-1.12.1-6.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1455): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-debtcollector-2.2.0-17.1.20230620164104.649189d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1456): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-rfc3986-1.4.0-7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1457): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-anyjson-0.3.3-26.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1458): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyroute2-0.6.6-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1459): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-utils-lang-4.8.2-17.1.20230621020317.a38b56a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1460): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-i18n-lang-5.0.1-17.1.20230621104020.73187bd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1461): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-i18n-5.0.1-17.1.20230621104020.73187bd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1462): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-config-2:8.5.1-17.1.20230621105008.de1dbee.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1463): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-utils-4.8.2-17.1.20230621020317.a38b56a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1464): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-concurrency-lang-4.4.0-17.1.20230620204443.7dcf9e9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.340:1465): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-fasteners-0.14.1-24.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1466): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-concurrency-4.4.0-17.1.20230620204443.7dcf9e9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1467): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bc-1.07.1-14.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1468): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="initscripts-rename-device-10.11.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1469): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="initscripts-10.11.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1470): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-network-scripts-10.11.1-9.17_1.1.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1471): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-network-scripts-openvswitch3.3-10.11.1-9.17_1.1.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1472): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-network-scripts-openvswitch-3.3-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1473): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openvswitch-selinux-extra-policy-1.0-39.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1474): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nmstate-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1475): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="unbound-libs-1.16.2-3.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1476): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openvswitch3.3-3.3.7-11.el9fdp.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1477): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nispor-1.2.10-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1478): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mstflint-4.23.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1479): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sshpass-1.09-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1480): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ply-3.11-14.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1481): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pycparser-2.20-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1482): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cffi-1.14.5-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1483): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cryptography-36.0.1-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1484): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-greenlet-1.1.2-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1485): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-eventlet-0.30.2-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1486): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-net-config-14.2.1-17.1.20251114150843.61d7bd7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1487): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-ansible-core-2.14.2-4.7.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780989907.341:1488): pid=20418 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-openvswitch-3.3-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1780989908.488:1489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780989908.488:1490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780989908.491:1491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rb1152e73d9874a40bdec52757622a15d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780989909.261:1492): pid=20416 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989909.261:1493): pid=20416 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989909.681:1494): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989909.682:1495): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989919.245:1496): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989919.245:1497): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989919.307:1498): pid=21681 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989919.307:1499): pid=21681 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66667A656C6D6162726A68626A6672736C72656B777768747978676D6B6D786F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989919.308:1500): pid=21681 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989919.313:1501): pid=21681 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989938.014:1502): pid=21681 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989938.015:1503): pid=21681 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989938.019:1504): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989938.019:1505): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989940.335:1506): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989940.336:1507): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989940.395:1508): pid=21701 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989940.397:1509): pid=21701 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756C70636F7363706E79736D7468666A6D666E767361786B7A636769626A7271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989940.397:1510): pid=21701 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989940.400:1511): pid=21701 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989940.565:1512): pid=21701 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989940.565:1513): pid=21701 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989940.577:1514): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989940.577:1515): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989940.851:1516): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989940.851:1517): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780989940.882:1518): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989940.882:1519): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989940.892:1520): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989940.892:1521): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780989940.925:1522): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989940.925:1523): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989941.138:1524): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989941.138:1525): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989941.199:1526): pid=21749 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989941.200:1527): pid=21749 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617262717170616D6E707173796367666A6D666A6666666371756A736D667661203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989941.200:1528): pid=21749 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989941.204:1529): pid=21749 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989941.365:1530): pid=21749 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989941.365:1531): pid=21749 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989941.369:1532): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989941.369:1533): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989941.399:1534): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989941.399:1535): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780989941.437:1536): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989941.437:1537): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989941.450:1538): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989941.450:1539): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780989941.477:1540): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989941.477:1541): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989941.601:1542): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989941.601:1543): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989941.659:1544): pid=21792 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989941.659:1545): pid=21792 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6970667A71737277786E626172777062736D7164667870717768787961716267203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989941.660:1546): pid=21792 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989941.662:1547): pid=21792 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989941.847:1548): pid=21792 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989941.847:1549): pid=21792 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989941.851:1550): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989941.851:1551): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989941.879:1552): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989941.879:1553): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780989941.908:1554): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989941.908:1555): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989942.112:1556): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989942.113:1557): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989942.171:1558): pid=21822 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989942.171:1559): pid=21822 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696A666972697679636A657564786170726863707062686D68797369756C656C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989942.172:1560): pid=21822 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989942.175:1561): pid=21822 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989942.378:1562): pid=21822 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989942.378:1563): pid=21822 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989942.384:1564): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989942.384:1565): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989942.414:1566): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989942.414:1567): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989942.474:1568): pid=21843 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989942.474:1569): pid=21843 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6972656A62666C646372706F726871646E667271736C7165647269716D70736E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989942.476:1570): pid=21843 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989942.478:1571): pid=21843 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989942.689:1572): pid=21843 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989942.689:1573): pid=21843 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989942.693:1574): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989942.693:1575): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989942.722:1576): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989942.722:1577): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989942.781:1578): pid=21863 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989942.782:1579): pid=21863 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7277666D63696972757679646C756B6B6E7675766C697870616F706C6D6D7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989942.782:1580): pid=21863 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989942.785:1581): pid=21863 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989942.998:1582): pid=21863 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989942.998:1583): pid=21863 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989943.002:1584): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989943.003:1585): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989943.026:1586): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989943.026:1587): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989943.087:1588): pid=21883 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989943.087:1589): pid=21883 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A726C6761726D6A6F766D707277676170636E62736A76656A766A626E6B696D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989943.088:1590): pid=21883 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989943.090:1591): pid=21883 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989943.282:1592): pid=21883 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989943.283:1593): pid=21883 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989943.287:1594): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989943.287:1595): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989943.307:1596): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989943.307:1597): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989943.356:1598): pid=21903 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989943.356:1599): pid=21903 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64787675706963777A70796B7566797674736F786A7676796B7068727A746662203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989943.356:1600): pid=21903 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989943.359:1601): pid=21903 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989943.521:1602): pid=21903 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989943.521:1603): pid=21903 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989943.525:1604): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989943.525:1605): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989944.255:1606): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989944.255:1607): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989944.317:1608): pid=21923 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989944.318:1609): pid=21923 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6978746767626A686A766C757969747077696969686968737A7662776C746F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989944.318:1610): pid=21923 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989944.321:1611): pid=21923 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1780989945.040:1612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780989945.069:1613): pid=21923 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989945.069:1614): pid=21923 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989945.073:1615): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989945.073:1616): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989945.106:1617): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989945.106:1618): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989945.158:1619): pid=22096 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989945.158:1620): pid=22096 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E756562756F727A75626F6D63646A7A7774687A6E746F717665676578706272203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989945.159:1621): pid=22096 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989945.162:1622): pid=22096 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1780989945.796:1623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovsdb-server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780989945.825:1624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-delete-transient-ports comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780989946.100:1625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-vswitchd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780989946.106:1626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openvswitch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780989946.144:1627): pid=22096 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989946.144:1628): pid=22096 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989946.149:1629): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989946.149:1630): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780989947.207:1631): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780989947.207:1632): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780989947.271:1633): pid=22262 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780989947.272:1634): pid=22262 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A76666F616C6170736174706E6F6E68656E79746A6F6162776F6F7576666E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780989947.272:1635): pid=22262 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780989947.277:1636): pid=22262 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ANOM_PROMISCUOUS msg=audit(1780989948.626:1637): dev=ovs-system prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1780989948.626:1637): arch=c000003e syscall=46 success=yes exit=56 a0=15 a1=7fff3d5d0b80 a2=0 a3=0 items=0 ppid=1 pid=22238 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1780989948.626:1637): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1780989948.668:1638): dev=br-ex prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1780989948.668:1638): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7fff3d5d0b60 a2=0 a3=0 items=0 ppid=1 pid=22238 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1780989948.668:1638): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1780989951.943:1639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1780989954.153:1640): dev=eth1 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1780989954.153:1640): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7fff3d5d0b60 a2=0 a3=0 items=0 ppid=1 pid=22238 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1780989954.153:1640): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1780989954.304:1641): dev=vlan44 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1780989954.304:1641): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7fff3d5d0b60 a2=0 a3=0 items=0 ppid=1 pid=22238 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1780989954.304:1641): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1780989957.567:1642): dev=vlan23 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1780989957.567:1642): arch=c000003e syscall=46 success=yes exit=52 a0=34 a1=7fff3d5d0b60 a2=0 a3=0 items=0 ppid=1 pid=22238 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1780989957.567:1642): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1780989960.836:1643): dev=vlan22 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1780989960.836:1643): arch=c000003e syscall=46 success=yes exit=52 a0=34 a1=7fff3d5d0b60 a2=0 a3=0 items=0 ppid=1 pid=22238 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1780989960.836:1643): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1780989961.978:1644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1780989964.110:1645): dev=vlan20 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1780989964.110:1645): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7fff3d5d0b60 a2=0 a3=0 items=0 ppid=1 pid=22238 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1780989964.110:1645): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1780989967.345:1646): dev=vlan21 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1780989967.345:1646): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7fff3d5d0b60 a2=0 a3=0 items=0 ppid=1 pid=22238 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1780989967.345:1646): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_END msg=audit(1780989976.924:1647): pid=22262 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780989976.924:1648): pid=22262 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780989976.928:1649): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780989976.928:1650): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780990003.139:1651): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780990003.139:1652): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780990005.344:1653): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780990005.344:1654): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780990008.124:1655): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780990008.124:1656): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780990008.402:1657): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780990008.402:1658): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780990008.440:1659): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780990008.440:1660): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780990008.497:1661): pid=23587 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780990008.498:1662): pid=23587 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73747563776D65616B796D63656D716173656F6B6975746B77756D7073617362203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780990008.498:1663): pid=23587 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780990008.505:1664): pid=23587 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780990008.712:1665): pid=23587 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780990008.712:1666): pid=23587 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780990008.717:1667): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780990008.717:1668): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780990009.251:1669): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780990009.251:1670): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780990009.534:1671): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780990009.535:1672): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780990009.576:1673): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780990009.576:1674): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780990009.641:1675): pid=23617 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780990009.641:1676): pid=23617 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7079686C6A7468657465617A65766A71766B726C706D65746E7A777A74797961203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780990009.642:1677): pid=23617 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780990009.645:1678): pid=23617 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780990009.907:1679): pid=23617 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780990009.907:1680): pid=23617 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780990009.912:1681): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780990009.912:1682): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780990010.134:1683): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780990010.134:1684): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780990010.349:1685): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780990010.349:1686): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780990011.422:1687): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780990011.422:1688): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780990011.627:1689): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780990011.627:1690): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780990012.111:1691): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780990012.112:1692): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780990012.173:1693): pid=23666 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780990012.174:1694): pid=23666 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D7175747370717070786365777163796F68767A787A786F7A667769726F68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780990012.174:1695): pid=23666 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780990012.177:1696): pid=23666 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1780990012.370:1697): prog-id=63 op=LOAD
type=BPF msg=audit(1780990012.371:1698): prog-id=64 op=LOAD
type=SERVICE_START msg=audit(1780990012.448:1699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780990012.468:1700): pid=23666 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780990012.468:1701): pid=23666 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1780990012.470:1702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780990012.473:1703): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780990012.473:1704): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780990013.447:1705): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19039 suid=1000 rport=46476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780990013.451:1706): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780990013.451:1707): pid=19036 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1780990014.994:1708): pid=23683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23684 suid=74 rport=58428 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780990014.994:1709): pid=23683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23684 suid=74 rport=58428 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780990015.048:1710): pid=23683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780990015.053:1711): pid=23683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780990015.077:1712): pid=23683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780990015.077:1713): pid=23683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780990015.105:1714): pid=23683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780990015.106:1715): pid=23683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23684 suid=74 rport=58428 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780990015.108:1716): pid=23683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780990015.108:1717): pid=23683 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=11 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780990015.108:1717): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd91e27410 a2=4 a3=3e8 items=0 ppid=1327 pid=23683 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780990015.108:1717): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780990015.110:1718): pid=23683 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1780990015.124:1719): pid=23683 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1780990015.126:1720): pid=23686 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780990015.169:1721): pid=23683 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780990015.169:1722): pid=23683 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780990015.374:1723): pid=23683 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780990015.374:1724): pid=23683 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780990018.010:1725): pid=23683 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23686 suid=1000 rport=58428 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780990018.013:1726): pid=23683 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780990018.013:1727): pid=23683 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_STOP msg=audit(1780990022.498:1728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780990029.103:1729): pid=23701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23702 suid=74 rport=52552 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780990029.103:1730): pid=23701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23702 suid=74 rport=52552 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780990029.655:1731): pid=23701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23702 suid=74 rport=52552 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780990029.656:1732): pid=23701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.151 addr=45.148.10.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780990029.656:1733): pid=23701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780990042.491:1734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780990042.534:1735): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780990042.534:1736): prog-id=0 op=UNLOAD
type=CRYPTO_SESSION msg=audit(1780990087.972:1737): pid=23707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23708 suid=74 rport=23174 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780990087.972:1738): pid=23707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23708 suid=74 rport=23174 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780990088.226:1739): pid=23707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23708 suid=74 rport=23174 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780990088.227:1740): pid=23707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780990088.227:1741): pid=23707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780990384.655:1742): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23711 suid=74 rport=26790 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780990384.655:1743): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23711 suid=74 rport=26790 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780990385.251:1744): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23711 suid=74 rport=26790 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780990385.251:1745): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.227.254.170 addr=45.227.254.170 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780990385.252:1746): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780990639.364:1747): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23714 suid=74 rport=37005 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780990639.364:1748): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23714 suid=74 rport=37005 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780990639.618:1749): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23714 suid=74 rport=37005 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780990639.619:1750): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780990639.619:1751): pid=23713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780990738.374:1752): pid=23716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23717 suid=74 rport=61026 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780990738.375:1753): pid=23716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23717 suid=74 rport=61026 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780990739.351:1754): pid=23716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23717 suid=74 rport=61026 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780990739.352:1755): pid=23716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.227.254.170 addr=45.227.254.170 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780990739.353:1756): pid=23716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780990750.455:1757): pid=23718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23719 suid=74 rport=35781 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780990750.455:1758): pid=23718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23719 suid=74 rport=35781 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780990750.709:1759): pid=23718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23719 suid=74 rport=35781 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780990750.709:1760): pid=23718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780990750.710:1761): pid=23718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780990861.841:1762): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23724 suid=74 rport=41252 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780990861.842:1763): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23724 suid=74 rport=41252 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780990862.099:1764): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23724 suid=74 rport=41252 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780990862.100:1765): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780990862.100:1766): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780990988.883:1767): pid=23725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23726 suid=74 rport=11609 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780990988.883:1768): pid=23725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23726 suid=74 rport=11609 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780990989.140:1769): pid=23725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23726 suid=74 rport=11609 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780990989.141:1770): pid=23725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780990989.141:1771): pid=23725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780991091.450:1772): pid=23727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23728 suid=74 rport=5364 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780991091.451:1773): pid=23727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23728 suid=74 rport=5364 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780991092.091:1774): pid=23727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23728 suid=74 rport=5364 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780991092.092:1775): pid=23727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.152 addr=45.148.10.152 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780991092.092:1776): pid=23727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780991117.974:1777): pid=23729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23730 suid=74 rport=25492 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780991117.974:1778): pid=23729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23730 suid=74 rport=25492 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780991118.229:1779): pid=23729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23730 suid=74 rport=25492 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780991118.230:1780): pid=23729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780991118.231:1781): pid=23729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780991244.904:1782): pid=23732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23733 suid=74 rport=59904 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780991244.904:1783): pid=23732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23733 suid=74 rport=59904 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780991245.156:1784): pid=23732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23733 suid=74 rport=59904 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780991245.157:1785): pid=23732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780991245.158:1786): pid=23732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780991376.023:1787): pid=23736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23737 suid=74 rport=54984 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780991376.024:1788): pid=23736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23737 suid=74 rport=54984 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780991376.278:1789): pid=23736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23737 suid=74 rport=54984 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780991376.279:1790): pid=23736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780991376.280:1791): pid=23736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780991445.102:1792): pid=23738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23739 suid=74 rport=16016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780991445.102:1793): pid=23738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23739 suid=74 rport=16016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780991445.746:1794): pid=23738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23739 suid=74 rport=16016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780991445.747:1795): pid=23738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.118.39.236 addr=92.118.39.236 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780991445.748:1796): pid=23738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780991499.714:1797): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23741 suid=74 rport=46398 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780991499.715:1798): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23741 suid=74 rport=46398 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780991499.958:1799): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23741 suid=74 rport=46398 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780991499.960:1800): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780991499.960:1801): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780991620.187:1802): pid=23743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23744 suid=74 rport=43415 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780991620.187:1803): pid=23743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23744 suid=74 rport=43415 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780991620.445:1804): pid=23743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23744 suid=74 rport=43415 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780991620.446:1805): pid=23743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780991620.446:1806): pid=23743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780991745.894:1807): pid=23746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23747 suid=74 rport=37349 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780991745.895:1808): pid=23746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23747 suid=74 rport=37349 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780991746.149:1809): pid=23746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23747 suid=74 rport=37349 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780991746.150:1810): pid=23746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780991746.151:1811): pid=23746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780991799.032:1812): pid=23748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23749 suid=74 rport=41772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780991799.032:1813): pid=23748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23749 suid=74 rport=41772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780991799.582:1814): pid=23748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23749 suid=74 rport=41772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780991799.583:1815): pid=23748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.157 addr=45.148.10.157 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780991799.583:1816): pid=23748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780991873.196:1817): pid=23751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23752 suid=74 rport=20916 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780991873.196:1818): pid=23751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23752 suid=74 rport=20916 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780991873.438:1819): pid=23751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23752 suid=74 rport=20916 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780991873.439:1820): pid=23751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780991873.440:1821): pid=23751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992000.182:1822): pid=23754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23755 suid=74 rport=41269 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992000.182:1823): pid=23754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23755 suid=74 rport=41269 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992000.434:1824): pid=23754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23755 suid=74 rport=41269 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992000.436:1825): pid=23754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992000.436:1826): pid=23754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992069.458:1827): pid=23769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23770 suid=74 rport=44632 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992069.458:1828): pid=23769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23770 suid=74 rport=44632 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992070.548:1829): pid=23769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23770 suid=74 rport=44632 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992070.549:1830): pid=23769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992070.550:1831): pid=23769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992127.796:1832): pid=23771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23772 suid=74 rport=35671 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992127.796:1833): pid=23771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23772 suid=74 rport=35671 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992128.040:1834): pid=23771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23772 suid=74 rport=35671 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992128.040:1835): pid=23771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992128.041:1836): pid=23771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992150.165:1837): pid=23773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23774 suid=74 rport=12772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992150.165:1838): pid=23773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23774 suid=74 rport=12772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992150.811:1839): pid=23773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23774 suid=74 rport=12772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992150.812:1840): pid=23773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.118.39.236 addr=92.118.39.236 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992150.813:1841): pid=23773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992254.380:1842): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23777 suid=74 rport=27798 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992254.381:1843): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23777 suid=74 rport=27798 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992254.621:1844): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23777 suid=74 rport=27798 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992254.622:1845): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992254.623:1846): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992376.380:1847): pid=23778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23779 suid=74 rport=52146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992376.380:1848): pid=23778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23779 suid=74 rport=52146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992376.626:1849): pid=23778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23779 suid=74 rport=52146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992376.627:1850): pid=23778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992376.627:1851): pid=23778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992438.961:1852): pid=23780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23781 suid=74 rport=45476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992438.961:1853): pid=23780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23781 suid=74 rport=45476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992440.401:1854): pid=23780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23781 suid=74 rport=45476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992440.402:1855): pid=23780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992440.402:1856): pid=23780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992499.316:1857): pid=23783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23784 suid=74 rport=10220 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992499.316:1858): pid=23783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23784 suid=74 rport=10220 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992499.867:1859): pid=23783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23784 suid=74 rport=10220 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992499.869:1860): pid=23783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.147 addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992499.869:1861): pid=23783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992503.470:1862): pid=23785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23786 suid=74 rport=19905 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992503.470:1863): pid=23785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23786 suid=74 rport=19905 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992503.723:1864): pid=23785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23786 suid=74 rport=19905 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992503.724:1865): pid=23785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992503.724:1866): pid=23785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992629.307:1867): pid=23787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23788 suid=74 rport=60835 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992629.307:1868): pid=23787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23788 suid=74 rport=60835 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992629.549:1869): pid=23787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23788 suid=74 rport=60835 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992629.550:1870): pid=23787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992629.551:1871): pid=23787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992701.545:1872): pid=23789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23790 suid=74 rport=45322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992701.546:1873): pid=23789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23790 suid=74 rport=45322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992702.663:1874): pid=23789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23790 suid=74 rport=45322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992702.664:1875): pid=23789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992702.665:1876): pid=23789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992758.596:1877): pid=23791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23792 suid=74 rport=45347 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992758.596:1878): pid=23791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23792 suid=74 rport=45347 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992758.853:1879): pid=23791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23792 suid=74 rport=45347 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992758.854:1880): pid=23791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992758.855:1881): pid=23791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992764.136:1882): pid=23793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23794 suid=74 rport=47098 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992764.136:1883): pid=23793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23794 suid=74 rport=47098 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992765.624:1884): pid=23793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23794 suid=74 rport=47098 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992765.625:1885): pid=23793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992765.626:1886): pid=23793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992826.593:1887): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23797 suid=74 rport=46176 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992826.593:1888): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23797 suid=74 rport=46176 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992827.706:1889): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23797 suid=74 rport=46176 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992827.707:1890): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992827.707:1891): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992851.725:1892): pid=23799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23800 suid=74 rport=61838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992851.725:1893): pid=23799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23800 suid=74 rport=61838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992852.279:1894): pid=23799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23800 suid=74 rport=61838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992852.280:1895): pid=23799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.157 addr=45.148.10.157 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992852.280:1896): pid=23799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992889.260:1897): pid=23801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23802 suid=74 rport=57980 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992889.260:1898): pid=23801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23802 suid=74 rport=57980 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992889.502:1899): pid=23801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23802 suid=74 rport=57980 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992889.503:1900): pid=23801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=74.87.117.149 addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992889.503:1901): pid=23801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=74.87.117.149 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992901.050:1902): pid=23803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23804 suid=74 rport=59482 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992901.050:1903): pid=23803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23804 suid=74 rport=59482 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992902.536:1904): pid=23803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23804 suid=74 rport=59482 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992902.537:1905): pid=23803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992902.538:1906): pid=23803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780992950.553:1907): pid=23805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23806 suid=74 rport=51290 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780992950.553:1908): pid=23805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23806 suid=74 rport=51290 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780992951.635:1909): pid=23805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23806 suid=74 rport=51290 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780992951.636:1910): pid=23805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780992951.637:1911): pid=23805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780993020.392:1912): pid=23807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23808 suid=74 rport=53450 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993020.392:1913): pid=23807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23808 suid=74 rport=53450 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780993020.453:1914): pid=23807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993020.453:1915): pid=23807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993020.480:1916): pid=23807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993020.481:1917): pid=23807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23808 suid=74 rport=53450 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780993020.483:1918): pid=23807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780993020.483:1919): pid=23807 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=12 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780993020.483:1919): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe980f1be0 a2=4 a3=3e8 items=0 ppid=1327 pid=23807 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993020.483:1919): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780993020.484:1920): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1780993020.504:1921): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1780993020.508:1922): pid=23810 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780993020.551:1923): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993020.551:1924): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780993020.585:1925): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993020.585:1926): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993020.606:1927): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993020.606:1928): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780993020.695:1929): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993020.695:1930): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993020.716:1931): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993020.716:1932): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780993020.777:1933): pid=23853 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780993020.777:1934): pid=23853 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C776571666C6D6B78717A696E786C63746E62706A7774646D766D727371716D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780993020.778:1935): pid=23853 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780993020.783:1936): pid=23853 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993020.948:1937): pid=23853 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780993020.949:1938): pid=23853 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993020.953:1939): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993020.953:1940): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993021.311:1941): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993021.311:1942): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780993021.341:1943): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993021.341:1944): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993021.370:1945): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993021.370:1946): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780993021.457:1947): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993021.457:1948): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993021.488:1949): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993021.488:1950): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780993021.554:1951): pid=23898 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780993021.554:1952): pid=23898 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D677A7079616B6F696E69617A787876616C7A6A6E706C63636F736B7371756D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780993021.555:1953): pid=23898 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780993021.558:1954): pid=23898 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993021.847:1955): pid=23898 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780993021.848:1956): pid=23898 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993021.851:1957): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993021.851:1958): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993021.961:1959): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993021.961:1960): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780993022.007:1961): pid=23918 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780993022.007:1962): pid=23918 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63786B6276687363726A666F6863656B6E7178786E6F6F7A6E73657379676F75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780993022.008:1963): pid=23918 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780993022.010:1964): pid=23918 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ADD_GROUP msg=audit(1780993022.231:1965): pid=23922 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group acct="tripleo-admin" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=ADD_USER msg=audit(1780993022.235:1966): pid=23922 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="tripleo-admin" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_MGMT msg=audit(1780993022.300:1967): pid=23922 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-home-dir id=1002 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="tripleo-admin"
type=USER_END msg=audit(1780993022.331:1968): pid=23918 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780993022.331:1969): pid=23918 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993022.334:1970): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993022.334:1971): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993022.450:1972): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993022.450:1973): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780993022.476:1974): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993022.476:1975): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993022.499:1976): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993022.499:1977): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780993022.525:1978): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993022.525:1979): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993022.543:1980): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993022.543:1981): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780993022.598:1982): pid=23974 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780993022.598:1983): pid=23974 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A726E656A6B6A62676A72657863746477696D627375666A70686B6E72616D64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780993022.599:1984): pid=23974 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780993022.602:1985): pid=23974 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993022.775:1986): pid=23974 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780993022.775:1987): pid=23974 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993022.779:1988): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993022.779:1989): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993022.805:1990): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993022.805:1991): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780993022.838:1992): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993022.839:1993): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993022.859:1994): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993022.859:1995): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780993022.890:1996): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993022.890:1997): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993023.063:1998): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993023.064:1999): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780993023.125:2000): pid=24017 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780993023.125:2001): pid=24017 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7863686272776C6278766573746D706479776D796D656976766F7577706B786B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780993023.126:2002): pid=24017 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780993023.129:2003): pid=24017 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993023.298:2004): pid=24017 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780993023.299:2005): pid=24017 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993023.303:2006): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993023.303:2007): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993023.322:2008): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993023.322:2009): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780993023.354:2010): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993023.354:2011): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993023.462:2012): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993023.463:2013): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780993023.521:2014): pid=24047 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780993023.521:2015): pid=24047 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7065716468746A796F6570756362726A6E77777962796362716F6563637077203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780993023.522:2016): pid=24047 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780993023.524:2017): pid=24047 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993023.706:2018): pid=24047 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780993023.706:2019): pid=24047 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993023.709:2020): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993023.710:2021): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993023.808:2022): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993023.808:2023): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780993023.869:2024): pid=24063 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780993023.869:2025): pid=24063 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6A617464706F65666873666866746C727277616D77687A786F796F69646176203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780993023.871:2026): pid=24063 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780993023.874:2027): pid=24063 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993024.066:2028): pid=24063 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780993024.066:2029): pid=24063 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993024.070:2030): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993024.070:2031): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993024.180:2032): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993024.180:2033): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780993024.241:2034): pid=24079 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780993024.241:2035): pid=24079 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F7663626971756C6666677273626A65636676766365657364766B7A707664203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780993024.241:2036): pid=24079 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780993024.244:2037): pid=24079 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993024.437:2038): pid=24079 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780993024.438:2039): pid=24079 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993024.441:2040): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993024.442:2041): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1780993024.742:2042): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993024.742:2043): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1780993024.800:2044): pid=24097 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780993024.801:2045): pid=24097 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F77676B676D71757A6662707173627063727A6A646F79646867777A76637968203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780993024.801:2046): pid=24097 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780993024.804:2047): pid=24097 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993024.973:2048): pid=24097 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780993024.973:2049): pid=24097 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780993024.977:2050): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993024.977:2051): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_SESSION msg=audit(1780993025.013:2052): pid=24082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=24084 suid=74 rport=43612 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993025.013:2053): pid=24082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=24084 suid=74 rport=43612 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993025.244:2054): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780993025.244:2055): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1780993025.445:2056): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780993025.445:2057): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780993026.440:2058): pid=24082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24084 suid=74 rport=43612 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993026.441:2059): pid=24082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993026.441:2060): pid=24082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780993033.136:2061): pid=24114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=24115 suid=74 rport=50564 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993033.137:2062): pid=24114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=24115 suid=74 rport=50564 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780993033.200:2063): pid=24114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993033.200:2064): pid=24114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993033.227:2065): pid=24114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993033.228:2066): pid=24114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24115 suid=74 rport=50564 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780993033.230:2067): pid=24114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780993033.230:2068): pid=24114 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=13 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1780993033.230:2068): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd71b11880 a2=4 a3=3ea items=0 ppid=1327 pid=24114 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993033.230:2068): proctitle=737368643A20747269706C656F2D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780993033.232:2069): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993033.266:2070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993033.297:2071): pid=24118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1780993033.297:2072): pid=24118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1780993033.298:2073): pid=24118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780993033.299:2074): pid=24118 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=14 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1780993033.299:2074): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd7a6b5f80 a2=4 a3=3ea items=0 ppid=1 pid=24118 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993033.299:2074): proctitle="(systemd)"
type=USER_START msg=audit(1780993033.301:2075): pid=24118 uid=0 auid=1002 ses=14 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993033.418:2076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780993033.429:2077): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_ACQ msg=audit(1780993033.431:2078): pid=24134 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993033.475:2079): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993033.475:2080): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993033.509:2081): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993033.509:2082): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993033.534:2083): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993033.534:2084): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993033.620:2085): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993033.620:2086): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993033.642:2087): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993033.643:2088): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993033.703:2089): pid=24177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993033.704:2090): pid=24177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73666A776E6F74767077676A777261627162676E6A6266716E77626E79707363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993033.705:2091): pid=24177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993033.708:2092): pid=24177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993034.028:2093): pid=24177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993034.029:2094): pid=24177 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993034.032:2095): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993034.032:2096): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993035.650:2097): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993035.650:2098): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993035.709:2099): pid=24197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993035.710:2100): pid=24197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7A6E7678747261726F66616767646B7A6877727A62756566616C6867736161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993035.710:2101): pid=24197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993035.713:2102): pid=24197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993035.980:2103): pid=24197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993035.980:2104): pid=24197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993035.983:2105): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993035.984:2106): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993036.333:2107): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993036.333:2108): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993036.389:2109): pid=24213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993036.389:2110): pid=24213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F617370626174616B6A796A716A6468706A68776E78677277757768746F6368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993036.391:2111): pid=24213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993036.394:2112): pid=24213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993036.543:2113): pid=24213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993036.543:2114): pid=24213 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993036.547:2115): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993036.547:2116): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993036.646:2117): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993036.647:2118): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993036.677:2119): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993036.677:2120): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993036.696:2121): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993036.696:2122): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993036.734:2123): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993036.734:2124): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993036.796:2125): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993036.797:2126): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993036.859:2127): pid=24261 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993036.860:2128): pid=24261 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7A736B6D687A6F6D626F79777264766F7A7968736A776374716B7476696662203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993036.860:2129): pid=24261 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993036.863:2130): pid=24261 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993037.095:2131): pid=24261 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993037.095:2132): pid=24261 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993037.099:2133): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993037.099:2134): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993037.114:2135): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993037.115:2136): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993037.142:2137): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993037.142:2138): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993037.360:2139): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993037.360:2140): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993037.410:2141): pid=24291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993037.410:2142): pid=24291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61737365776C6761736970766C6D7869636E74787A6E6C697766797463727675203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993037.411:2143): pid=24291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993037.413:2144): pid=24291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993037.571:2145): pid=24291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993037.571:2146): pid=24291 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993037.576:2147): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993037.576:2148): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993037.899:2149): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993037.899:2150): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993037.949:2151): pid=24307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993037.949:2152): pid=24307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62646E6E746E756F6C6E6E7A786D666A6461777965627275636B676B64786462203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993037.949:2153): pid=24307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993037.952:2154): pid=24307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993038.101:2155): pid=24307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993038.101:2156): pid=24307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993038.104:2157): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993038.104:2158): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993038.320:2159): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993038.320:2160): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993038.366:2161): pid=24323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993038.367:2162): pid=24323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73756E6C766A747466776A796B6C79646276647076636F777964776564726971203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993038.367:2163): pid=24323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993038.369:2164): pid=24323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993038.549:2165): pid=24323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993038.549:2166): pid=24323 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993038.552:2167): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993038.552:2168): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993038.789:2169): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993038.790:2170): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993038.850:2171): pid=24340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993038.850:2172): pid=24340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627163676C68647164657166776B6F68706E73756976696A756E6A6972766876203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993038.851:2173): pid=24340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993038.853:2174): pid=24340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993039.024:2175): pid=24340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993039.024:2176): pid=24340 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993039.028:2177): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993039.028:2178): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993039.574:2179): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993039.574:2180): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993039.630:2181): pid=24356 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993039.630:2182): pid=24356 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C726776616C646E706A6D7A6E74696C7468706F61786F6E6F65657778646B65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993039.631:2183): pid=24356 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993039.634:2184): pid=24356 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993039.825:2185): pid=24356 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993039.825:2186): pid=24356 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993039.827:2187): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993039.827:2188): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993040.142:2189): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993040.142:2190): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993040.198:2191): pid=24373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993040.198:2192): pid=24373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A766366636C647A68796768747A70736F686366717074636F6A7961756B61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993040.199:2193): pid=24373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993040.201:2194): pid=24373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993043.593:2195): pid=24375 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-release-17.1.13-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1780993044.352:2196): pid=24373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993044.352:2197): pid=24373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993044.361:2198): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993044.362:2199): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993044.688:2200): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993044.688:2201): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993044.745:2202): pid=24394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993044.745:2203): pid=24394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69686772716A626271757A6F7977747A786E7273777662667870726B756F7076203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993044.746:2204): pid=24394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993044.748:2205): pid=24394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993044.939:2206): pid=24394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993044.940:2207): pid=24394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993044.942:2208): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993044.942:2209): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993045.037:2210): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993045.037:2211): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993045.095:2212): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993045.095:2213): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E77626D797A6A6471776572736B7575686D7563616878626B717772696F6C65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993045.096:2214): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993045.099:2215): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993061.088:2216): prog-id=65 op=LOAD
type=BPF msg=audit(1780993061.088:2217): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993061.088:2218): prog-id=66 op=LOAD
type=BPF msg=audit(1780993061.088:2219): prog-id=67 op=LOAD
type=BPF msg=audit(1780993061.088:2220): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993061.088:2221): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993061.091:2222): prog-id=68 op=LOAD
type=BPF msg=audit(1780993061.091:2223): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993061.091:2224): prog-id=69 op=LOAD
type=BPF msg=audit(1780993061.091:2225): prog-id=70 op=LOAD
type=BPF msg=audit(1780993061.091:2226): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993061.091:2227): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993061.092:2228): prog-id=71 op=LOAD
type=BPF msg=audit(1780993061.092:2229): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993061.092:2230): prog-id=72 op=LOAD
type=BPF msg=audit(1780993061.092:2231): prog-id=73 op=LOAD
type=BPF msg=audit(1780993061.092:2232): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993061.092:2233): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993061.093:2234): prog-id=74 op=LOAD
type=BPF msg=audit(1780993061.093:2235): prog-id=0 op=UNLOAD
type=ADD_GROUP msg=audit(1780993064.104:2236): pid=24641 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="puppet"
type=GRP_MGMT msg=audit(1780993064.109:2237): pid=24641 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="puppet"
type=ADD_USER msg=audit(1780993064.178:2238): pid=24648 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="puppet" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993065.274:2239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993065.274:2240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993069.993:2241): prog-id=75 op=LOAD
type=BPF msg=audit(1780993069.993:2242): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993069.995:2243): prog-id=76 op=LOAD
type=BPF msg=audit(1780993069.995:2244): prog-id=77 op=LOAD
type=BPF msg=audit(1780993069.995:2245): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993069.995:2246): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993069.997:2247): prog-id=78 op=LOAD
type=BPF msg=audit(1780993069.997:2248): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993069.999:2249): prog-id=79 op=LOAD
type=BPF msg=audit(1780993069.999:2250): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993069.999:2251): prog-id=80 op=LOAD
type=BPF msg=audit(1780993069.999:2252): prog-id=81 op=LOAD
type=BPF msg=audit(1780993069.999:2253): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993069.999:2254): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.000:2255): prog-id=82 op=LOAD
type=BPF msg=audit(1780993070.000:2256): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.000:2257): prog-id=83 op=LOAD
type=BPF msg=audit(1780993070.000:2258): prog-id=84 op=LOAD
type=BPF msg=audit(1780993070.000:2259): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.000:2260): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993070.084:2261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lvm2-monitor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993070.341:2262): prog-id=85 op=LOAD
type=BPF msg=audit(1780993070.341:2263): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.342:2264): prog-id=86 op=LOAD
type=BPF msg=audit(1780993070.342:2265): prog-id=87 op=LOAD
type=BPF msg=audit(1780993070.342:2266): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.342:2267): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.345:2268): prog-id=88 op=LOAD
type=BPF msg=audit(1780993070.345:2269): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.347:2270): prog-id=89 op=LOAD
type=BPF msg=audit(1780993070.347:2271): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.347:2272): prog-id=90 op=LOAD
type=BPF msg=audit(1780993070.347:2273): prog-id=91 op=LOAD
type=BPF msg=audit(1780993070.347:2274): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.347:2275): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.347:2276): prog-id=92 op=LOAD
type=BPF msg=audit(1780993070.347:2277): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.347:2278): prog-id=93 op=LOAD
type=BPF msg=audit(1780993070.347:2279): prog-id=94 op=LOAD
type=BPF msg=audit(1780993070.347:2280): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993070.347:2281): prog-id=0 op=UNLOAD
type=CRYPTO_SESSION msg=audit(1780993071.248:2282): pid=24752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=24753 suid=74 rport=44748 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993071.248:2283): pid=24752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=24753 suid=74 rport=44748 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993072.340:2284): pid=24752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24753 suid=74 rport=44748 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993072.341:2285): pid=24752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993072.341:2286): pid=24752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993073.306:2287): pid=24750 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=4444 proto=6 tcontext=system_u:object_r:mysqld_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993074.351:2288): pid=25352 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=6653 proto=6 tcontext=system_u:object_r:openvswitch_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993075.793:2289): pid=25359 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=8088 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993076.730:2290): pid=25363 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=8000 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993078.194:2291): pid=25370 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6639 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993079.657:2292): pid=25378 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6641 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993081.167:2293): pid=25384 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6642 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993082.138:2294): pid=25388 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/swift-object-relinker" ftype=any tcontext=system_u:object_r:swift_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993083.101:2295): pid=25393 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/gnocchi/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993083.994:2296): pid=25398 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/tftpboot(/.*)?" ftype=any tcontext=system_u:object_r:tftpdir_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993084.948:2297): pid=25403 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/kolla(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993085.821:2298): pid=25408 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/tripleo-config(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993086.777:2299): pid=25413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/vhost_sockets(/.*)?" ftype=any tcontext=system_u:object_r:virt_cache_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993087.736:2300): pid=25418 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/neutron-rootwrap-daemon" ftype=any tcontext=system_u:object_r:neutron_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993088.660:2301): pid=25423 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/cache/swift(/.*)?" ftype=any tcontext=system_u:object_r:swift_var_cache_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993089.632:2302): pid=25428 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/designate/bind9(/.*)?" ftype=any tcontext=system_u:object_r:named_zone_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993090.582:2303): pid=25433 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/httpboot(/.*)?" ftype=any tcontext=system_u:object_r:httpd_sys_content_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993091.515:2304): pid=25438 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/panko/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993092.455:2305): pid=25445 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/nova/.ssh(/.*)?" ftype=any tcontext=system_u:object_r:ssh_home_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993093.369:2306): pid=25452 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/zaqar/zaqar.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993094.316:2307): pid=25457 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/neutron-vpn-agent" ftype=any tcontext=system_u:object_r:neutron_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993095.282:2308): pid=25462 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/pacemaker.log.*" ftype=any tcontext=system_u:object_r:cluster_var_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993096.225:2309): pid=25467 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/swift-object-reconstructor" ftype=any tcontext=system_u:object_r:swift_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993097.159:2310): pid=25472 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/openstack-dashboard" ftype=any tcontext=system_u:object_r:httpd_var_lib_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993098.658:2311): pid=25478 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/aodh/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993099.616:2312): pid=25483 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/config-data(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=httpd_execmem val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=httpd_can_network_connect val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=httpd_use_openstack val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=domain_can_mmap_files val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=domain_kernel_load_modules val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=nis_enabled val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=collectd_tcp_network_connect val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=glance_api_can_network val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=glance_use_fusefs val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=glance_use_execmem val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=daemons_enable_cluster_mode val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=neutron_can_network val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=haproxy_connect_any val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=rsync_client val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=rsync_full_access val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=swift_can_network val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=virt_use_execmem val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993116.305:2313): bool=virt_use_fusefs val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=SYSCALL msg=audit(1780993116.305:2313): arch=c000003e syscall=1 success=yes exit=2 a0=34 a1=7ffd1eaaa5ae a2=2 a3=0 items=0 ppid=24746 pid=25489 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="semanage" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993116.305:2313): proctitle=2F7573722F62696E2F707974686F6E33002D457349002F7573722F7362696E2F73656D616E61676500696D706F7274002D4E
type=MAC_POLICY_LOAD msg=audit(1780993118.153:2314): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1780993118.153:2314): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7f560c600000 a2=361c2b a3=0 items=0 ppid=24746 pid=25591 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993118.153:2314): proctitle="/usr/sbin/load_policy"
type=SERVICE_START msg=audit(1780993118.627:2315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8b46811945ae4c73ad21a18903f6f70b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993118.880:2316): prog-id=95 op=LOAD
type=BPF msg=audit(1780993118.880:2317): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993118.882:2318): prog-id=96 op=LOAD
type=BPF msg=audit(1780993118.882:2319): prog-id=97 op=LOAD
type=BPF msg=audit(1780993118.882:2320): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993118.882:2321): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993118.884:2322): prog-id=98 op=LOAD
type=BPF msg=audit(1780993118.884:2323): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993118.886:2324): prog-id=99 op=LOAD
type=BPF msg=audit(1780993118.886:2325): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993118.886:2326): prog-id=100 op=LOAD
type=BPF msg=audit(1780993118.886:2327): prog-id=101 op=LOAD
type=BPF msg=audit(1780993118.886:2328): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993118.886:2329): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993118.886:2330): prog-id=102 op=LOAD
type=BPF msg=audit(1780993118.886:2331): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993118.886:2332): prog-id=103 op=LOAD
type=BPF msg=audit(1780993118.886:2333): prog-id=104 op=LOAD
type=BPF msg=audit(1780993118.886:2334): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993118.886:2335): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993118.933:2336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r618afb55789e49b0ac38d2fc210f7a32 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1780993119.001:2337): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-libs-3.0.4-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.001:2338): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-bigdecimal-3.0.0-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.001:2339): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-default-gems-3.0.4-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.001:2340): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-bundler-2.2.33-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.001:2341): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-io-console-0.5.7-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.001:2342): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-json-2.5.1-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.001:2343): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-psych-3.3.2-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.001:2344): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-rdoc-6.3.3-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.001:2345): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygems-3.2.33-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.002:2346): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-3.0.4-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.002:2347): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-regex-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.002:2348): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-system-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.002:2349): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-filesystem-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.002:2350): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-thread-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.002:2351): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libaio-0.3.111-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.002:2352): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-chrono-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.002:2353): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-locale-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.002:2354): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="device-mapper-libs-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.002:2355): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="device-mapper-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.002:2356): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-event-libs-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2357): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-simplejson-3.17.5-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2358): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-os-service-types-1.7.0-17.1.20230620201222.0b2f473.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2359): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keystoneauth1-4.4.0-17.1.20240812145234.112bcae.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2360): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="dib-utils-0.0.11-17.1.20230620173328.51661c3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2361): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jeepney-0.6.0-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2362): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-psutil-5.8.0-12.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2363): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-refresh-config-13.1.1-17.1.20231020000854.812905b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2364): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-secretstorage-3.3.1-3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2365): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keyring-21.8.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2366): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pystache-0.5.4-15.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2367): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-apply-config-13.1.1-17.1.20231020001757.3c7f9b9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.003:2368): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-event-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2369): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lvm2-libs-9:2.03.17-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2370): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-persistent-data-0.9.0-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2371): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-fast_gettext-1.2.0-9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2372): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-hocon-1.3.1-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2373): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="hiera-3.6.0-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2374): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-rexml-3.2.5-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2375): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-concurrent-ruby-1.1.5-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2376): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-deep_merge-1.2.1-7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2377): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-multi_json-1.15.0-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2378): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-ruby-shadow-2.5.0-15.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2379): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-semantic_puppet-1.0.4-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2380): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libselinux-ruby-3.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2381): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="yaml-cpp-0.6.3-6.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.004:2382): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-munch-2.5.0-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2383): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-msgpack-1.0.2-4.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2384): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-serialization-4.1.1-17.1.20230621011445.bbe5d5a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2385): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keystoneclient-1:4.3.0-17.1.20230621025111.d5cb761.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2386): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-swiftclient-3.11.1-17.1.20230620204150.06b36ae.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2387): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-colorama-0.4.4-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2388): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-requestsexceptions-1.4.0-17.1.20230620164652.d7ac0ff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2389): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-context-3.2.1-17.1.20230620204857.b124eb7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2390): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-log-lang-4.4.0-17.1.20230620205407.9b29c90.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2391): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-log-4.4.0-17.1.20230620205407.9b29c90.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2392): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyperclip-1.8.0-3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2393): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jmespath-0.10.0-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2394): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="glibc-langpack-en-2.34-60.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2395): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="avahi-libs-0.8-12.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2396): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libxslt-1.1.34-11.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2397): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-lxml-4.6.5-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2398): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcp-conf-6.0.1-8.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2399): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-mako-1.1.4-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2400): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-dogpile-cache-1.1.5-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2401): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="augeas-libs-1.13.0-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2402): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-augeas-0.5.0-29.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2403): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="oniguruma-6.9.6-1.el9.5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2404): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wcwidth-0.2.5-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2405): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cmd2-1.4.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2406): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cliff-3.7.0-17.1.20230620172206.117a100.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2407): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyasn1-0.4.8-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2408): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-rsa-4.6-3.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2409): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-boto-2.45.0-8.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2410): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="heat-cfntools-1.4.2-6.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2411): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-appdirs-1.4.4-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2412): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-openstacksdk-0.55.1-17.1.20250516211008.f09ed4a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2413): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-osc-lib-2.3.1-17.1.20230620203400.2b7a679.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2414): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heatclient-2.3.1-17.1.20230621012952.d16c245.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2415): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-zaqarclient-2.4.0-17.1.20230620214253.e388947.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2416): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-collect-config-13.1.1-17.1.20231020001748.76173d8.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2417): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2418): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-ansible-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2419): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-apply-config-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2420): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-docker-cmd-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2421): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-hiera-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2422): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-json-file-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2423): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lm_sensors-libs-3.6.0-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2424): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-atomic-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2425): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-log-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2426): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-program-options-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2427): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libuv-1:1.42.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2428): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcp-libs-6.0.1-8.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2429): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-services-1.8.8-6.el9_1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2430): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-nowide-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2431): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="leatherman-1.12.6-5.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2432): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cpp-hocon-0.3.0-7.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2433): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="facter-1:3.14.19-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2434): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-facter-1:3.14.19-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2435): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-puppet-resource_api-1.8.13-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2436): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-headless-7.10.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2437): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-7.10.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2438): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-stdlib-6.3.1-17.1.20230621000857.7c1ae25.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2439): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-inifile-4.2.1-17.1.20250804150825.df46d2a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2440): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-concat-6.2.1-17.1.20250725131333.dfeabb9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2441): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-apache-6.5.2-17.1.20250811150836.e4a1532.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2442): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-xinetd-3.3.1-17.1.20230620185435.8d460c4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.005:2443): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-firewall-3.4.1-17.1.20250804151611.94f707c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2444): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-memcached-6.0.0-17.1.20230620184630.4c70dbd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2445): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-sysctl-0.0.13-17.1.20250725113328.847ec1c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2446): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rsync-1.1.4-17.1.20250804151510.ea6397e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2447): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-corosync-8.0.1-17.1.20230621104908.6a9da9a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2448): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-mysql-10.6.1-17.1.20230621022141.937d044.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2449): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-systemd-2.12.1-17.1.20230620191611.8f68b0d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2450): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-redis-6.1.1-17.1.20230620191704.547105e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2451): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-openstack_extras-18.5.1-17.1.20230621042409.504e1a0.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2452): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-horizon-18.6.1-17.1.20251008130751.8074e69.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2453): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-pacemaker-1.5.1-17.1.20250214161010.f10ce89.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2454): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-auditd-2.2.1-17.1.20230620192453.189b22b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2455): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-collectd-13.0.1-17.1.20230620193147.ad138a7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2456): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-dns-8.2.1-17.1.20230621002045.70f5b28.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2457): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rsyslog-4.0.1-17.1.20230620200132.2548a0d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2458): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ssh-6.2.1-17.1.20230620190251.6e0f430.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2459): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-haproxy-4.2.2-17.1.20250725114653.a797b8c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2460): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-keepalived-0.0.2-17.1.20250725114922.bbca37a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2461): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-fdio-18.2-1.20220727113954.6fd1c8e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2462): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-archive-4.6.1-17.1.20230620181607.bc7e4ff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2463): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rabbitmq-11.0.1-17.1.20230620182519.63fee2c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2464): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-openstacklib-18.5.2-17.1.20230621052822.64d8ac6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2465): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-oslo-18.5.1-17.1.20230621052358.fe2a147.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2466): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-keystone-18.6.1-17.1.20251008090800.cb0adcb.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2467): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-glance-18.6.1-17.1.20250220151014.81b081d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2468): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-cinder-18.5.2-17.1.20230621054224.6aa60e7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2469): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-nova-18.6.1-17.1.20230621090443.a21eae4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2470): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-octavia-18.5.1-17.1.20230621062420.842492c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2471): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-manila-18.5.2-17.1.20231102190827.a72a7d5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2472): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ceilometer-18.4.3-17.1.20230927010818.3838907.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2473): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-designate-18.6.1-17.1.20230621061456.f4c0b89.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2474): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-gnocchi-18.4.3-17.1.20230621061020.7584b94.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2475): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-heat-18.4.1-17.1.20230621111632.3b41bb0.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2476): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-placement-5.4.3-17.1.20230621061610.e7557a5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2477): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-swift-18.6.1-17.1.20230621052139.f105ffc.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2478): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-barbican-18.4.2-17.1.20250625204151.af6c77b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2479): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-aodh-18.4.2-17.1.20230620151218.3e47b5a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2480): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-certmonger-2.7.1-17.1.20230620184730.3e2e660.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2481): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-etcd-1.12.3-17.1.20230620193226.e143c2d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2482): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-nssdb-1.0.2-17.1.20230620185645.2ed2a2d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2483): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-qdr-7.4.1-17.1.20230620195605.8a575de.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2484): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ovn-18.6.1-17.1.20240925094907.7805f7e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2485): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-git-0.5.0-17.1.20250725114148.4e4498e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2486): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ipaclient-2.5.2-17.1.20250725102608.b086731.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2487): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-snmp-3.9.1-17.1.20250725115759.5d73485.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2488): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-kmod-2.5.0-17.1.20230620190646.52e31e3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2489): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-vswitch-14.4.3-17.1.20230621043558.51e82ca.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2490): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-neutron-18.6.1-17.1.20251217160845.c9d467f.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2491): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-puppet-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2492): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-module-data-0.5.1-17.1.20250725115430.28dafce.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2493): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-remote-10.0.0-17.1.20250725114017.7420908.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2494): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-vcsrepo-3.1.1-17.1.20250725113408.a36ee18.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2495): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ironic-18.7.1-17.1.20240305210817.edf93f9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2496): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-tripleo-14.2.3-17.1.20250320101351.40278e1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2497): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-heat-agents-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2498): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sysstat-12.5.4-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2499): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="jq-1.6-14.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2500): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lvm2-9:2.03.17-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2501): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-selinux-0.8.37-17.1.20231107080825.05dd1b2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2502): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="tmpwatch-2.11-20.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993119.006:2503): pid=24413 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="driverctl-0.111-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993119.486:2504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993119.486:2505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993119.489:2506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8b46811945ae4c73ad21a18903f6f70b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993119.490:2507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r618afb55789e49b0ac38d2fc210f7a32 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993120.011:2508): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993120.011:2509): pid=24411 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993120.015:2510): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993120.015:2511): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993120.155:2512): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993120.155:2513): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993120.219:2514): pid=26513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993120.220:2515): pid=26513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72736979716C6761776B786F696F767364647571747578656C7064616A6D6A63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993120.221:2516): pid=26513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993120.226:2517): pid=26513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993121.117:2518): pid=26513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993121.117:2519): pid=26513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993121.120:2520): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993121.120:2521): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993121.503:2522): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993121.503:2523): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993121.561:2524): pid=26652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993121.561:2525): pid=26652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77716D61706A66787173636B6C676B73776C7667767A63796D6B75666C6F756C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993121.562:2526): pid=26652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993121.565:2527): pid=26652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993123.097:2528): prog-id=105 op=LOAD
type=BPF msg=audit(1780993123.097:2529): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993123.099:2530): prog-id=106 op=LOAD
type=BPF msg=audit(1780993123.099:2531): prog-id=107 op=LOAD
type=BPF msg=audit(1780993123.099:2532): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993123.099:2533): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993123.101:2534): prog-id=108 op=LOAD
type=BPF msg=audit(1780993123.101:2535): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993123.102:2536): prog-id=109 op=LOAD
type=BPF msg=audit(1780993123.103:2537): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993123.103:2538): prog-id=110 op=LOAD
type=BPF msg=audit(1780993123.103:2539): prog-id=111 op=LOAD
type=BPF msg=audit(1780993123.103:2540): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993123.103:2541): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993123.103:2542): prog-id=112 op=LOAD
type=BPF msg=audit(1780993123.103:2543): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993123.103:2544): prog-id=113 op=LOAD
type=BPF msg=audit(1780993123.103:2545): prog-id=114 op=LOAD
type=BPF msg=audit(1780993123.103:2546): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993123.103:2547): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993123.136:2548): pid=26652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993123.136:2549): pid=26652 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993123.140:2550): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993123.141:2551): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993123.257:2552): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993123.257:2553): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993123.318:2554): pid=26706 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993123.318:2555): pid=26706 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6570637965757A737268677874737272736173646661656F6473787679637A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993123.319:2556): pid=26706 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993123.323:2557): pid=26706 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993123.503:2558): pid=26706 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993123.504:2559): pid=26706 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993123.508:2560): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993123.508:2561): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993123.649:2562): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993123.649:2563): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993123.718:2564): pid=26722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993123.718:2565): pid=26722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747470716C687A7270736B727171727867687466766977746776777571776774203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993123.719:2566): pid=26722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993123.721:2567): pid=26722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993123.908:2568): pid=26722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993123.908:2569): pid=26722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993123.912:2570): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993123.913:2571): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993124.112:2572): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993124.112:2573): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993124.174:2574): pid=26739 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993124.174:2575): pid=26739 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6D6679716165746A7767716D6A736A75686D6A6A67627A76687179736E7075203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993124.175:2576): pid=26739 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993124.178:2577): pid=26739 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993124.475:2578): pid=26739 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993124.476:2579): pid=26739 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993124.479:2580): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993124.479:2581): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993124.726:2582): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993124.726:2583): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993124.777:2584): pid=26757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993124.778:2585): pid=26757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C6A6E7375626B6E6863617062706E65716A6E627475647863716168616C79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993124.778:2586): pid=26757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993124.781:2587): pid=26757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993124.964:2588): pid=26757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993124.964:2589): pid=26757 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993124.968:2590): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993124.968:2591): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993125.077:2592): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993125.077:2593): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993125.136:2594): pid=26775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993125.136:2595): pid=26775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A776E6164656868716A696C706D63706A696B70657471696E6F6E74746E6977203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993125.137:2596): pid=26775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993125.139:2597): pid=26775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993125.320:2598): pid=26775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993125.320:2599): pid=26775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993125.323:2600): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993125.323:2601): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993125.421:2602): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993125.421:2603): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993125.482:2604): pid=26793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993125.483:2605): pid=26793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A7669676B6270716961656E6A61777873616C6F6A777A616D786F756D7879203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993125.484:2606): pid=26793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993125.486:2607): pid=26793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993125.825:2608): pid=26793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993125.826:2609): pid=26793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993125.830:2610): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993125.830:2611): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993125.916:2612): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993125.917:2613): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993125.980:2614): pid=26812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993125.981:2615): pid=26812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F6D707967736E797665656767766F646273696E6F756E6262786F69677070203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993125.981:2616): pid=26812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993125.985:2617): pid=26812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993126.163:2618): pid=26812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993126.163:2619): pid=26812 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993126.167:2620): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993126.167:2621): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993126.408:2622): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993126.408:2623): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993126.468:2624): pid=26829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993126.469:2625): pid=26829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F656C656474767074706E74656B686270666376766C69786D64686662636278203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993126.469:2626): pid=26829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993126.472:2627): pid=26829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993126.653:2628): pid=26829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993126.653:2629): pid=26829 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993126.657:2630): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993126.657:2631): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993126.732:2632): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993126.732:2633): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993126.788:2634): pid=26847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993126.788:2635): pid=26847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76657A737978727779616D6B676969707468776A676D72766B666B776A637579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993126.788:2636): pid=26847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993126.791:2637): pid=26847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993126.931:2638): pid=26847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993126.931:2639): pid=26847 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993126.935:2640): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993126.935:2641): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993127.071:2642): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993127.071:2643): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993127.133:2644): pid=26863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993127.134:2645): pid=26863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6279746E6C6974736D72616D7562646A73777662696A6A62727A717773777971203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993127.135:2646): pid=26863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993127.138:2647): pid=26863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993127.312:2648): pid=26863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993127.312:2649): pid=26863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993127.316:2650): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993127.316:2651): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993127.534:2652): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993127.534:2653): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993127.597:2654): pid=26879 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993127.597:2655): pid=26879 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786B757866627276746B6D7279736E6878736363766368766270707371646477203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993127.598:2656): pid=26879 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993127.600:2657): pid=26879 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993127.753:2658): pid=26879 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993127.753:2659): pid=26879 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993127.757:2660): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993127.757:2661): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993127.851:2662): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993127.851:2663): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993127.914:2664): pid=26895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993127.915:2665): pid=26895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686A6574766572667474677367696B6B7679777672746E686C69797065787069203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993127.915:2666): pid=26895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993127.917:2667): pid=26895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993128.074:2668): pid=26895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993128.075:2669): pid=26895 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993128.079:2670): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993128.079:2671): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993128.377:2672): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993128.377:2673): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993128.425:2674): pid=26911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993128.425:2675): pid=26911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6975766978676C767364766C736D617976657764726B79797A6E637464646F78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993128.425:2676): pid=26911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993128.427:2677): pid=26911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993128.602:2678): pid=26911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993128.602:2679): pid=26911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993128.606:2680): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993128.606:2681): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993128.700:2682): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993128.700:2683): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993128.764:2684): pid=26927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993128.764:2685): pid=26927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6975796E6573676672746678727365646A686A6E656C70666A65616F76676469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993128.765:2686): pid=26927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993128.767:2687): pid=26927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993128.942:2688): pid=26927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993128.942:2689): pid=26927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993128.947:2690): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993128.947:2691): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993129.055:2692): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993129.055:2693): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993129.122:2694): pid=26945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993129.123:2695): pid=26945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7577726F76636E70616B77707462787464786B7864717877676163736B6D6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993129.123:2696): pid=26945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993129.127:2697): pid=26945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993129.299:2698): pid=26945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993129.299:2699): pid=26945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993129.303:2700): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993129.304:2701): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993129.563:2702): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993129.563:2703): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993129.620:2704): pid=26961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993129.620:2705): pid=26961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63756E6B706E6D716D6C70716461657A7578687A6D636A747973616D796C6662203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993129.621:2706): pid=26961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993129.623:2707): pid=26961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993129.810:2708): pid=26961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993129.810:2709): pid=26961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993129.815:2710): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993129.815:2711): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993129.899:2712): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993129.899:2713): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993129.965:2714): pid=26977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993129.967:2715): pid=26977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73766B6D7770786870676A63727374656861796A67746B777174666A6D77786E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993129.968:2716): pid=26977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993129.970:2717): pid=26977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993130.157:2718): pid=26977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993130.158:2719): pid=26977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993130.162:2720): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993130.162:2721): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993130.251:2722): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993130.251:2723): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993130.308:2724): pid=26995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993130.308:2725): pid=26995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696564796874646E77727A776776626D6669796D65796468616C7261696D696E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993130.309:2726): pid=26995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993130.312:2727): pid=26995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993130.496:2728): pid=26995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993130.496:2729): pid=26995 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993130.499:2730): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993130.499:2731): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993130.688:2732): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993130.688:2733): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993130.752:2734): pid=27014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993130.753:2735): pid=27014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7565636D7074667163706A786F76696F71697777686174647265636F616D6A77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993130.754:2736): pid=27014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993130.757:2737): pid=27014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993130.915:2738): pid=27014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993130.915:2739): pid=27014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993130.919:2740): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993130.919:2741): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993131.017:2742): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993131.017:2743): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993131.080:2744): pid=27030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993131.080:2745): pid=27030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76786671676F637567797976776F7A6F70656772697567776E746B6C647A7074203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993131.081:2746): pid=27030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993131.084:2747): pid=27030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993131.285:2748): pid=27030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993131.285:2749): pid=27030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993131.289:2750): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993131.289:2751): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993131.379:2752): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993131.379:2753): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993131.405:2754): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993131.405:2755): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993131.425:2756): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993131.425:2757): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993131.491:2758): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993131.492:2759): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993131.516:2760): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993131.516:2761): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993131.576:2762): pid=27078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993131.576:2763): pid=27078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67717264626F6C67627477736F676F61697767706A6362746B74746A62777567203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993131.577:2764): pid=27078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993131.580:2765): pid=27078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993131.755:2766): pid=27078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993131.755:2767): pid=27078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993131.760:2768): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993131.760:2769): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993131.782:2770): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993131.782:2771): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993131.834:2772): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993131.834:2773): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993131.854:2774): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993131.854:2775): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993131.888:2776): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993131.888:2777): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993131.908:2778): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993131.908:2779): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993131.956:2780): pid=27121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993131.956:2781): pid=27121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6667667276666F696875797262726172796574716E78676B62666D6364636B66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993131.956:2782): pid=27121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993131.958:2783): pid=27121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993132.122:2784): pid=27121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993132.122:2785): pid=27121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993132.126:2786): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993132.126:2787): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993132.145:2788): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993132.145:2789): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993132.178:2790): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993132.178:2791): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993132.678:2792): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993132.679:2793): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993132.728:2794): pid=27151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993132.728:2795): pid=27151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6176617377696C727A6B62666D74647A656162736B71776B7975627661756D7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993132.729:2796): pid=27151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993132.731:2797): pid=27151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993132.901:2798): pid=27151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993132.901:2799): pid=27151 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993132.904:2800): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993132.905:2801): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993133.015:2802): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993133.015:2803): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993133.064:2804): pid=27168 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993133.064:2805): pid=27168 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7973706B6E706E676A7677756B7A676D616A636A7A6373666D667A6262766F75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993133.065:2806): pid=27168 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993133.067:2807): pid=27168 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993137.097:2808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r9bde93496c814a2db7f6b299c66b8abd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993137.365:2809): prog-id=115 op=LOAD
type=BPF msg=audit(1780993137.365:2810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993137.367:2811): prog-id=116 op=LOAD
type=BPF msg=audit(1780993137.367:2812): prog-id=117 op=LOAD
type=BPF msg=audit(1780993137.367:2813): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993137.367:2814): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993137.370:2815): prog-id=118 op=LOAD
type=BPF msg=audit(1780993137.370:2816): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993137.372:2817): prog-id=119 op=LOAD
type=BPF msg=audit(1780993137.372:2818): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993137.372:2819): prog-id=120 op=LOAD
type=BPF msg=audit(1780993137.372:2820): prog-id=121 op=LOAD
type=BPF msg=audit(1780993137.372:2821): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993137.372:2822): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993137.373:2823): prog-id=122 op=LOAD
type=BPF msg=audit(1780993137.373:2824): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993137.373:2825): prog-id=123 op=LOAD
type=BPF msg=audit(1780993137.373:2826): prog-id=124 op=LOAD
type=BPF msg=audit(1780993137.373:2827): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993137.373:2828): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1780993137.463:2829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993137.524:2830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993137.524:2831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993137.527:2832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r9bde93496c814a2db7f6b299c66b8abd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993138.840:2833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993138.869:2834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd50db94dd2c64aebb185582133c8f922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1780993138.872:2835): pid=27170 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="tuned-2.27.0-1.2.20260514git0eb28ac3.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993138.872:2836): pid=27170 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="tuned-profiles-cpu-partitioning-2.27.0-1.2.20260514git0eb28ac3.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993139.062:2837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993139.062:2838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993139.065:2839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rd50db94dd2c64aebb185582133c8f922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993139.773:2840): pid=27168 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993139.773:2841): pid=27168 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993139.780:2842): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993139.780:2843): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993139.876:2844): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993139.877:2845): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993139.948:2846): pid=27606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993139.949:2847): pid=27606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E656C6967626E706464797166696D69636B7A6D7A736B6D63617A766C777362203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993139.951:2848): pid=27606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993139.957:2849): pid=27606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993141.332:2850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780993142.144:2851): pid=27785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=27786 suid=74 rport=55968 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993142.144:2852): pid=27785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=27786 suid=74 rport=55968 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993142.726:2853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993142.753:2854): pid=27606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993142.753:2855): pid=27606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993142.758:2856): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993142.758:2857): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993142.843:2858): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993142.843:2859): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993142.890:2860): pid=27803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993142.890:2861): pid=27803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666F68696F6E6E71666C6F766876666764676D61696B676375666B6B67717061203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993142.891:2862): pid=27803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993142.894:2863): pid=27803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993143.062:2864): pid=27803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993143.063:2865): pid=27803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993143.067:2866): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993143.067:2867): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993143.360:2868): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993143.360:2869): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993143.420:2870): pid=27820 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993143.420:2871): pid=27820 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687362736A62736876717768676E6861737061726E6469736D6963776D6F7569203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993143.422:2872): pid=27820 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993143.425:2873): pid=27820 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993143.587:2874): pid=27820 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993143.587:2875): pid=27820 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993143.591:2876): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993143.591:2877): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993143.625:2878): pid=27785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27786 suid=74 rport=55968 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993143.626:2879): pid=27785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993143.627:2880): pid=27785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993143.658:2881): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993143.658:2882): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993143.715:2883): pid=27836 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993143.715:2884): pid=27836 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6669767A6D74736773667970696E65696D676B786E6A6675637A627970736267203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993143.716:2885): pid=27836 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993143.718:2886): pid=27836 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993143.883:2887): pid=27836 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993143.883:2888): pid=27836 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993143.887:2889): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993143.887:2890): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993144.152:2891): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993144.152:2892): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993144.218:2893): pid=27852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993144.218:2894): pid=27852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6364717A6B7A757A747472686B6B796F6F6E6A736C73637A6C7671736A657678203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993144.219:2895): pid=27852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993144.221:2896): pid=27852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993145.587:2897): pid=27852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993145.588:2898): pid=27852 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993145.592:2899): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993145.592:2900): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993145.810:2901): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993145.811:2902): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993145.870:2903): pid=27872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993145.870:2904): pid=27872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C776461776F626F7A787677717270736C6662756A6A7A747768696962787665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993145.871:2905): pid=27872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993145.874:2906): pid=27872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993146.036:2907): pid=27872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993146.036:2908): pid=27872 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993146.040:2909): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993146.040:2910): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993146.127:2911): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993146.128:2912): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993146.186:2913): pid=27889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993146.186:2914): pid=27889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6962616E6C746173746B766479627677756C7477717473737762696763677A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993146.187:2915): pid=27889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993146.189:2916): pid=27889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993146.358:2917): pid=27889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993146.359:2918): pid=27889 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993146.363:2919): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993146.363:2920): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993147.179:2921): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993147.179:2922): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993147.237:2923): pid=27905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993147.238:2924): pid=27905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6577666B7A69786C736D6D6D69626263687A67766D6572657076787276786E64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993147.239:2925): pid=27905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993147.241:2926): pid=27905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993147.407:2927): pid=27905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993147.408:2928): pid=27905 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993147.412:2929): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993147.412:2930): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993149.315:2931): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993149.315:2932): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993149.381:2933): pid=27921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993149.382:2934): pid=27921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78647479657971696F6F6C67797A7061706C7570677A75687076777270797369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993149.382:2935): pid=27921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993149.385:2936): pid=27921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993149.567:2937): pid=27921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993149.567:2938): pid=27921 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993149.572:2939): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993149.572:2940): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993149.673:2941): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993149.673:2942): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993149.709:2943): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993149.709:2944): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993149.727:2945): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993149.727:2946): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993149.766:2947): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993149.766:2948): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993149.787:2949): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993149.788:2950): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993149.850:2951): pid=27969 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993149.850:2952): pid=27969 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7573706F7871637479746779667A7164736E7568796D63637262636C6C6E6A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993149.850:2953): pid=27969 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993149.853:2954): pid=27969 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993150.062:2955): pid=27969 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993150.062:2956): pid=27969 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993150.066:2957): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993150.066:2958): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993150.094:2959): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993150.094:2960): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993150.136:2961): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993150.136:2962): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993150.158:2963): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993150.158:2964): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993150.193:2965): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993150.193:2966): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993150.215:2967): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993150.215:2968): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993150.276:2969): pid=28014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993150.276:2970): pid=28014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B63756863636A696C6161746F76757766716F6D6F76647072796E627A667464203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993150.277:2971): pid=28014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993150.279:2972): pid=28014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993150.448:2973): pid=28014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993150.448:2974): pid=28014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993150.453:2975): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993150.453:2976): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993150.476:2977): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993150.476:2978): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993150.507:2979): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993150.507:2980): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993150.600:2981): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993150.600:2982): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993150.665:2983): pid=28044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993150.665:2984): pid=28044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796B6B666C686374746267696475626C776C646A636F6B7962737A656C68676F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993150.666:2985): pid=28044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993150.669:2986): pid=28044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993150.843:2987): pid=28044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993150.844:2988): pid=28044 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993150.847:2989): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993150.847:2990): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993151.031:2991): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993151.031:2992): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993151.063:2993): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993151.063:2994): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993151.096:2995): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993151.096:2996): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993151.133:2997): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993151.134:2998): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993151.157:2999): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993151.158:3000): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993151.216:3001): pid=28092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993151.216:3002): pid=28092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787A6A777764616D6A686C7A6862707078656B766D75726A71636D7A6A70766D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993151.217:3003): pid=28092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993151.219:3004): pid=28092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993151.385:3005): pid=28092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993151.385:3006): pid=28092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993151.389:3007): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993151.389:3008): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993151.416:3009): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993151.416:3010): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993151.447:3011): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993151.447:3012): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993151.471:3013): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993151.471:3014): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993151.497:3015): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993151.497:3016): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993151.519:3017): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993151.519:3018): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993151.577:3019): pid=28135 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993151.577:3020): pid=28135 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736F787568666461666B67716773617576756364686C67656469687665716763203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993151.578:3021): pid=28135 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993151.581:3022): pid=28135 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993151.747:3023): pid=28135 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993151.748:3024): pid=28135 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993151.751:3025): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993151.752:3026): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993151.772:3027): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993151.772:3028): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993151.802:3029): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993151.802:3030): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993151.917:3031): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993151.917:3032): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993151.947:3033): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993151.947:3034): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993151.970:3035): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993151.970:3036): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993152.008:3037): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993152.008:3038): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993152.076:3039): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993152.076:3040): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993152.137:3041): pid=28197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993152.137:3042): pid=28197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647A7674756579716A657574666A6E7A62687965696967626A62706E67627361203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993152.137:3043): pid=28197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993152.140:3044): pid=28197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993152.313:3045): pid=28197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993152.313:3046): pid=28197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993152.316:3047): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993152.316:3048): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993152.334:3049): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993152.334:3050): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993152.361:3051): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993152.361:3052): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993152.380:3053): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993152.380:3054): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993152.404:3055): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993152.404:3056): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993152.422:3057): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993152.422:3058): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993152.463:3059): pid=28240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993152.463:3060): pid=28240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F78646974766B67767077666667716466616A70716F76706577776E736D6164203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993152.464:3061): pid=28240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993152.465:3062): pid=28240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993152.621:3063): pid=28240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993152.621:3064): pid=28240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993152.625:3065): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993152.625:3066): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993152.645:3067): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993152.645:3068): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993152.675:3069): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993152.676:3070): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993152.729:3071): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993152.729:3072): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993152.761:3073): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993152.761:3074): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993152.781:3075): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993152.781:3076): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993152.819:3077): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993152.819:3078): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993152.929:3079): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993152.930:3080): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993152.993:3081): pid=28302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993152.993:3082): pid=28302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7375637A666F68756564776D64776268636969767772656C6B64766477736963203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993152.994:3083): pid=28302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993152.997:3084): pid=28302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993153.156:3085): pid=28302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993153.156:3086): pid=28302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993153.160:3087): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993153.160:3088): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993153.185:3089): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993153.185:3090): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993153.219:3091): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993153.220:3092): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993153.239:3093): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993153.239:3094): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993153.271:3095): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993153.272:3096): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993153.290:3097): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993153.290:3098): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993153.350:3099): pid=28345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993153.350:3100): pid=28345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74677A666F6163686D6C70776B686E71766A7662756D6C706E6C757062777675203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993153.351:3101): pid=28345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993153.353:3102): pid=28345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993153.518:3103): pid=28345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993153.519:3104): pid=28345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993153.523:3105): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993153.523:3106): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993153.543:3107): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993153.544:3108): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993153.569:3109): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993153.570:3110): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993153.626:3111): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993153.627:3112): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993153.656:3113): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993153.656:3114): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993153.675:3115): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993153.676:3116): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993153.710:3117): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993153.710:3118): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993153.885:3119): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993153.885:3120): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993153.942:3121): pid=28407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993153.943:3122): pid=28407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7774716C6D66636C73626872626578756171776D62757966627A7561786279203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993153.944:3123): pid=28407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993153.946:3124): pid=28407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993154.116:3125): pid=28407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993154.116:3126): pid=28407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993154.120:3127): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993154.120:3128): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993154.147:3129): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993154.148:3130): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993154.190:3131): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993154.190:3132): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993154.212:3133): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993154.212:3134): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993154.243:3135): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993154.243:3136): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993154.264:3137): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993154.264:3138): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993154.321:3139): pid=28451 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993154.321:3140): pid=28451 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65726B676374736D616F616D6274627776797A6B71776361656E756A67667963203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993154.323:3141): pid=28451 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993154.326:3142): pid=28451 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993154.507:3143): pid=28451 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993154.507:3144): pid=28451 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993154.511:3145): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993154.511:3146): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993154.532:3147): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993154.532:3148): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993154.566:3149): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993154.566:3150): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993154.624:3151): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993154.625:3152): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993154.653:3153): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993154.653:3154): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993154.673:3155): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993154.673:3156): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993154.706:3157): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993154.706:3158): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993154.739:3159): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993154.739:3160): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993154.800:3161): pid=28513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993154.800:3162): pid=28513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D63667474697165706E627670636C6872726F6F627A79657661786276797779203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993154.801:3163): pid=28513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993154.805:3164): pid=28513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993154.976:3165): pid=28513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993154.976:3166): pid=28513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993154.980:3167): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993154.980:3168): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993155.006:3169): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993155.006:3170): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993155.042:3171): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993155.042:3172): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993155.055:3173): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993155.055:3174): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993155.083:3175): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993155.083:3176): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993155.100:3177): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993155.101:3178): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993155.146:3179): pid=28556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993155.147:3180): pid=28556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626B74677A686F667A6A7A64716D69626B6C686A73717174736B6779706C756D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993155.148:3181): pid=28556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993155.150:3182): pid=28556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993155.305:3183): pid=28556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993155.305:3184): pid=28556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993155.308:3185): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993155.309:3186): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993155.330:3187): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993155.330:3188): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993155.358:3189): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993155.359:3190): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993155.422:3191): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993155.422:3192): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993155.457:3193): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993155.457:3194): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993155.480:3195): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993155.480:3196): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993155.517:3197): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993155.518:3198): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993155.593:3199): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993155.594:3200): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993155.658:3201): pid=28618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993155.658:3202): pid=28618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796E6D78776164636C64726B6272666D7175646964786368797779756D657074203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993155.659:3203): pid=28618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993155.663:3204): pid=28618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993155.833:3205): pid=28618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993155.833:3206): pid=28618 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993155.837:3207): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993155.837:3208): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993155.864:3209): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993155.864:3210): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993155.906:3211): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993155.906:3212): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993155.926:3213): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993155.926:3214): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993155.961:3215): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993155.961:3216): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993155.985:3217): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993155.986:3218): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993156.035:3219): pid=28661 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993156.036:3220): pid=28661 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7261776A7265646475776F737875626566617169656C676D766D736B70727263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993156.037:3221): pid=28661 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993156.040:3222): pid=28661 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993156.217:3223): pid=28661 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993156.217:3224): pid=28661 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993156.222:3225): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993156.222:3226): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993156.244:3227): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993156.244:3228): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993156.274:3229): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993156.274:3230): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993156.325:3231): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993156.325:3232): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993156.357:3233): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993156.358:3234): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993156.377:3235): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993156.377:3236): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993156.416:3237): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993156.417:3238): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993156.464:3239): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993156.464:3240): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993156.526:3241): pid=28723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993156.527:3242): pid=28723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62657A7670656B61666F6664746B686173687064667074676F78646C64656764203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993156.528:3243): pid=28723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993156.531:3244): pid=28723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993156.695:3245): pid=28723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993156.695:3246): pid=28723 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993156.700:3247): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993156.700:3248): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993156.725:3249): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993156.725:3250): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993156.758:3251): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993156.759:3252): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993156.777:3253): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993156.777:3254): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993156.809:3255): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993156.809:3256): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993156.828:3257): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993156.829:3258): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993156.891:3259): pid=28766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993156.891:3260): pid=28766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72756867677274776F67656F696F69786769776B6C717A776D647178646D6374203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993156.892:3261): pid=28766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993156.895:3262): pid=28766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993157.088:3263): pid=28766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993157.089:3264): pid=28766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993157.092:3265): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993157.092:3266): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993157.107:3267): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993157.107:3268): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993157.137:3269): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993157.137:3270): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993157.191:3271): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993157.191:3272): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993157.217:3273): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993157.217:3274): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993157.237:3275): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993157.237:3276): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993157.263:3277): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993157.263:3278): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993157.316:3279): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993157.316:3280): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993157.357:3281): pid=28828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993157.357:3282): pid=28828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6E786A6469777163667377756B71796966637370757A696C73766E66766E7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993157.358:3283): pid=28828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993157.360:3284): pid=28828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993157.527:3285): pid=28828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993157.528:3286): pid=28828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993157.532:3287): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993157.532:3288): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993157.557:3289): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993157.558:3290): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993157.593:3291): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993157.594:3292): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993157.615:3293): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993157.615:3294): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993157.646:3295): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993157.646:3296): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993157.668:3297): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993157.669:3298): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993157.724:3299): pid=28871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993157.724:3300): pid=28871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697074786B75716E716F616E667772737968756D7072676578796E776D696C62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993157.725:3301): pid=28871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993157.727:3302): pid=28871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993157.893:3303): pid=28871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993157.893:3304): pid=28871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993157.897:3305): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993157.897:3306): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993157.920:3307): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993157.920:3308): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993157.949:3309): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993157.949:3310): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993158.018:3311): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993158.018:3312): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993158.048:3313): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993158.048:3314): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993158.071:3315): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993158.071:3316): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993158.101:3317): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993158.102:3318): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993158.162:3319): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993158.162:3320): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993158.217:3321): pid=28933 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993158.218:3322): pid=28933 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75767375787077797272796A62756B6A6178627066756D667576706971736961203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993158.218:3323): pid=28933 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993158.221:3324): pid=28933 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993158.393:3325): pid=28933 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993158.393:3326): pid=28933 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993158.397:3327): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993158.397:3328): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993158.421:3329): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993158.421:3330): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993158.458:3331): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993158.458:3332): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993158.481:3333): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993158.481:3334): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993158.510:3335): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993158.510:3336): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993158.534:3337): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993158.534:3338): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993158.594:3339): pid=28976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993158.595:3340): pid=28976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646A74667A777663796664736B75796D637761777A6563686468686F6A717274203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993158.595:3341): pid=28976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993158.597:3342): pid=28976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993158.777:3343): pid=28976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993158.778:3344): pid=28976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993158.781:3345): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993158.782:3346): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993158.800:3347): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993158.800:3348): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993158.829:3349): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993158.829:3350): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993158.894:3351): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993158.894:3352): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993158.925:3353): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993158.925:3354): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993158.948:3355): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993158.948:3356): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993158.984:3357): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993158.984:3358): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993159.041:3359): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993159.041:3360): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993159.102:3361): pid=29038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993159.102:3362): pid=29038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706A7A706362676F726D6E6972657864726B767575626769746F787377746868203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993159.103:3363): pid=29038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993159.107:3364): pid=29038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993159.293:3365): pid=29038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993159.293:3366): pid=29038 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993159.297:3367): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993159.297:3368): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993159.323:3369): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993159.323:3370): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993159.360:3371): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993159.360:3372): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993159.382:3373): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993159.382:3374): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993159.413:3375): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993159.413:3376): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993159.437:3377): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993159.437:3378): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993159.496:3379): pid=29081 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993159.496:3380): pid=29081 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F716F666B786C7A7974787A616B7774616874757774697164676F7A6D677762203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993159.497:3381): pid=29081 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993159.499:3382): pid=29081 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993159.690:3383): pid=29081 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993159.690:3384): pid=29081 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993159.694:3385): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993159.695:3386): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993159.717:3387): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993159.717:3388): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993159.751:3389): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993159.751:3390): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993159.805:3391): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993159.805:3392): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993159.839:3393): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993159.839:3394): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993159.856:3395): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993159.856:3396): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993159.895:3397): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993159.895:3398): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993159.951:3399): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993159.951:3400): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993160.017:3401): pid=29143 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993160.017:3402): pid=29143 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766467616C6E65616A7270776869706F67777A7464626C666875717476726869203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993160.018:3403): pid=29143 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993160.022:3404): pid=29143 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993160.187:3405): pid=29143 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993160.187:3406): pid=29143 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993160.191:3407): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993160.191:3408): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993160.217:3409): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993160.217:3410): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993160.253:3411): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993160.254:3412): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993160.274:3413): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993160.274:3414): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993160.302:3415): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993160.303:3416): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993160.327:3417): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993160.327:3418): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993160.387:3419): pid=29186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993160.387:3420): pid=29186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756C787369726669766C636E7170756E79756276756B68636D786F6170746872203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993160.388:3421): pid=29186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993160.390:3422): pid=29186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993160.552:3423): pid=29186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993160.552:3424): pid=29186 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993160.556:3425): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993160.556:3426): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993160.574:3427): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993160.574:3428): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993160.606:3429): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993160.606:3430): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993160.776:3431): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993160.777:3432): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993160.834:3433): pid=29216 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993160.834:3434): pid=29216 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C7262646269647979796368737069666B6A62677A6C666369616A687A6565203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993160.835:3435): pid=29216 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993160.837:3436): pid=29216 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993161.007:3437): pid=29216 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993161.007:3438): pid=29216 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993161.012:3439): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993161.012:3440): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993161.217:3441): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993161.217:3442): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993161.246:3443): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993161.246:3444): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993161.264:3445): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993161.264:3446): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993161.296:3447): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993161.296:3448): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993161.318:3449): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993161.318:3450): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993161.378:3451): pid=29264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993161.379:3452): pid=29264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66776362667A6F726E63706D61756D696E7661746F687367776869786A6A6E66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993161.379:3453): pid=29264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993161.382:3454): pid=29264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993161.545:3455): pid=29264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993161.546:3456): pid=29264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993161.561:3457): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993161.561:3458): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993161.587:3459): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993161.587:3460): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993161.615:3461): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993161.616:3462): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993161.632:3463): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993161.632:3464): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993161.661:3465): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993161.661:3466): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993161.680:3467): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993161.681:3468): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993161.737:3469): pid=29307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993161.737:3470): pid=29307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7371626763636E716E6B657366777773797675797076716D6761617568797777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993161.738:3471): pid=29307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993161.741:3472): pid=29307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993161.906:3473): pid=29307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993161.906:3474): pid=29307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993161.909:3475): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993161.909:3476): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993161.927:3477): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993161.927:3478): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993161.950:3479): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993161.950:3480): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993163.462:3481): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993163.462:3482): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993163.523:3483): pid=29337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993163.524:3484): pid=29337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68737767716D676C726675716F7A63756F6C61627A6F6A67677277706D617964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993163.525:3485): pid=29337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993163.528:3486): pid=29337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993163.984:3487): pid=29337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993163.984:3488): pid=29337 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993163.987:3489): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993163.988:3490): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993164.080:3491): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993164.080:3492): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993164.139:3493): pid=29398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993164.139:3494): pid=29398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F676E7963776E70756D6E74667871627968716E6668627978616D6C6A6666203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993164.140:3495): pid=29398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993164.142:3496): pid=29398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993168.438:3497): pid=29398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993168.438:3498): pid=29398 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993168.442:3499): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993168.442:3500): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993168.582:3501): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993168.582:3502): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993168.630:3503): pid=29415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993168.630:3504): pid=29415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75696E667062616F647875706678767A76786B747269666A70636176706B6965203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993168.631:3505): pid=29415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993168.633:3506): pid=29415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993172.780:3507): pid=29415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993172.781:3508): pid=29415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993172.784:3509): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993172.785:3510): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993173.282:3511): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993173.283:3512): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993173.346:3513): pid=29432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993173.346:3514): pid=29432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7678686F78696E687964686E75686A6370726C6B746A72776365717069687469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993173.347:3515): pid=29432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993173.349:3516): pid=29432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993173.523:3517): pid=29432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993173.523:3518): pid=29432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993173.526:3519): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993173.527:3520): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993173.908:3521): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993173.908:3522): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993173.968:3523): pid=29455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993173.968:3524): pid=29455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A676974796C687373696A6A797A7076797A616F767A706F626D68786B6A6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993173.970:3525): pid=29455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993173.973:3526): pid=29455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993174.151:3527): pid=29455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993174.152:3528): pid=29455 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993174.155:3529): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993174.155:3530): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993174.499:3531): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993174.499:3532): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993174.563:3533): pid=29478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993174.563:3534): pid=29478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77756D736C696E78686B73686E627A626D62777765766578656D666F766D6A74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993174.565:3535): pid=29478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993174.568:3536): pid=29478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993174.754:3537): pid=29478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993174.755:3538): pid=29478 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993174.758:3539): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993174.758:3540): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993175.121:3541): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993175.121:3542): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993175.184:3543): pid=29501 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993175.185:3544): pid=29501 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6A6179717A68687A73746D65796D7472756C776F7A7066646A6F6779626367203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993175.185:3545): pid=29501 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993175.188:3546): pid=29501 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993175.368:3547): pid=29501 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993175.368:3548): pid=29501 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993175.372:3549): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993175.372:3550): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993175.688:3551): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993175.688:3552): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993175.751:3553): pid=29524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993175.751:3554): pid=29524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7178796363657A726E6170657A70777373696F767678627374696A666C6C6164203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993175.752:3555): pid=29524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993175.754:3556): pid=29524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993175.943:3557): pid=29524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993175.944:3558): pid=29524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993175.947:3559): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993175.947:3560): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993176.967:3561): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993176.967:3562): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993177.031:3563): pid=29547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993177.031:3564): pid=29547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657968756A677867676C69756D6F65787071747A63757A74796A75646C72687A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993177.031:3565): pid=29547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993177.034:3566): pid=29547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993177.216:3567): pid=29547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993177.216:3568): pid=29547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993177.220:3569): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993177.220:3570): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993177.302:3571): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993177.302:3572): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993177.333:3573): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993177.333:3574): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993177.351:3575): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993177.351:3576): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993177.388:3577): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993177.388:3578): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993177.407:3579): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993177.407:3580): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993177.453:3581): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993177.454:3582): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7573776A766E666E7A6B636C7568746C6F6F667574777177647A706C736E726B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993177.454:3583): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993177.457:3584): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993177.618:3585): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993177.618:3586): pid=29595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993177.621:3587): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993177.621:3588): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993177.641:3589): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993177.642:3590): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993177.689:3591): pid=29613 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993177.690:3592): pid=29613 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716579677A6865727572796B72796A6E707A766862776A686E616D7170707465203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993177.690:3593): pid=29613 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993177.693:3594): pid=29613 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993177.861:3595): pid=29613 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993177.861:3596): pid=29613 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993177.865:3597): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993177.865:3598): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993177.882:3599): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993177.882:3600): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993177.914:3601): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993177.914:3602): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993177.986:3603): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993177.986:3604): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993178.046:3605): pid=29643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993178.047:3606): pid=29643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756B78616A77676D6C6666656C6879706766666F6478646B666475776E6C6672203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993178.047:3607): pid=29643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993178.049:3608): pid=29643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993178.228:3609): pid=29643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993178.229:3610): pid=29643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993178.231:3611): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993178.232:3612): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993178.387:3613): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993178.387:3614): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993178.416:3615): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993178.416:3616): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993178.436:3617): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993178.436:3618): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993178.469:3619): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993178.469:3620): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993178.493:3621): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993178.493:3622): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993178.551:3623): pid=29691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993178.551:3624): pid=29691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776F636E676C6E736B6461746E776E626F7A7274656972776961706D696A696E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993178.552:3625): pid=29691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993178.554:3626): pid=29691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993178.732:3627): pid=29691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993178.733:3628): pid=29691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993178.736:3629): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993178.736:3630): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993178.755:3631): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993178.755:3632): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993178.807:3633): pid=29709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993178.807:3634): pid=29709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74667162706A666C646676616B6A726878696D66797961766865626971637774203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993178.808:3635): pid=29709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993178.810:3636): pid=29709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993178.975:3637): pid=29709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993178.975:3638): pid=29709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993178.978:3639): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993178.979:3640): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993178.996:3641): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993178.996:3642): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993179.019:3643): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993179.019:3644): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993179.125:3645): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993179.125:3646): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993179.153:3647): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993179.153:3648): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993179.171:3649): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993179.171:3650): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993179.203:3651): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993179.203:3652): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993179.269:3653): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993179.269:3654): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993179.326:3655): pid=29771 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993179.326:3656): pid=29771 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65776E66777A7A63656D7774727A666B6876736175676B72617079776F6D6D6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993179.327:3657): pid=29771 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993179.329:3658): pid=29771 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993179.503:3659): pid=29771 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993179.504:3660): pid=29771 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993179.507:3661): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993179.507:3662): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993179.526:3663): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993179.526:3664): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993179.578:3665): pid=29789 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993179.578:3666): pid=29789 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6F7770766C69636C7277677373696D747163616E787373656367667863776B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993179.579:3667): pid=29789 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993179.581:3668): pid=29789 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993179.760:3669): pid=29789 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993179.760:3670): pid=29789 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993179.764:3671): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993179.764:3672): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993179.782:3673): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993179.782:3674): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993179.810:3675): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993179.810:3676): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993179.864:3677): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993179.865:3678): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993179.893:3679): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993179.893:3680): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993179.913:3681): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993179.913:3682): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993179.947:3683): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993179.947:3684): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993180.053:3685): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993180.053:3686): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993180.111:3687): pid=29851 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993180.111:3688): pid=29851 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E787665696C68757274706871727A6C6B7077686B6376746461767A656373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993180.112:3689): pid=29851 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993180.115:3690): pid=29851 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993180.294:3691): pid=29851 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993180.294:3692): pid=29851 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993180.298:3693): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993180.298:3694): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993180.318:3695): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993180.319:3696): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993180.372:3697): pid=29870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993180.373:3698): pid=29870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66656E76697A67736A61686D696B79646D79626E7966726A6F79696A70686C71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993180.374:3699): pid=29870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993180.375:3700): pid=29870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993180.545:3701): pid=29870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993180.545:3702): pid=29870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993180.549:3703): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993180.549:3704): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993180.570:3705): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993180.570:3706): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993180.596:3707): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993180.596:3708): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993180.649:3709): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993180.649:3710): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993180.679:3711): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993180.679:3712): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993180.698:3713): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993180.698:3714): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993180.733:3715): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993180.734:3716): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993180.904:3717): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993180.904:3718): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993180.962:3719): pid=29932 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993180.962:3720): pid=29932 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7578706E667563727070676D6375766A686D767A6478666170676464787465203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993180.963:3721): pid=29932 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993180.966:3722): pid=29932 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993181.155:3723): pid=29932 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993181.156:3724): pid=29932 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993181.160:3725): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993181.160:3726): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993181.185:3727): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993181.186:3728): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993181.237:3729): pid=29950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993181.237:3730): pid=29950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74797765667279696570796C746765796A6F69676D766B786475686269736A74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993181.238:3731): pid=29950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993181.241:3732): pid=29950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993181.396:3733): pid=29950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993181.396:3734): pid=29950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993181.400:3735): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993181.400:3736): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993181.421:3737): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993181.421:3738): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993181.453:3739): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993181.453:3740): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993181.508:3741): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993181.508:3742): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993181.535:3743): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993181.535:3744): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993181.556:3745): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993181.557:3746): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993181.586:3747): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993181.586:3748): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993181.618:3749): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993181.618:3750): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993181.676:3751): pid=30012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993181.676:3752): pid=30012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7967666865646364627A637768767A756D75666C6964726262677A7869786A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993181.676:3753): pid=30012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993181.679:3754): pid=30012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993181.885:3755): pid=30012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993181.886:3756): pid=30012 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993181.890:3757): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993181.890:3758): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993181.916:3759): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993181.916:3760): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993181.978:3761): pid=30030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993181.978:3762): pid=30030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B637A67656A61756B6864786271636967706163726879696863796879616D74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993181.979:3763): pid=30030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993181.982:3764): pid=30030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993182.151:3765): pid=30030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993182.152:3766): pid=30030 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993182.156:3767): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993182.156:3768): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993182.178:3769): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993182.178:3770): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993182.209:3771): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993182.209:3772): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993182.271:3773): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993182.271:3774): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993182.298:3775): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993182.298:3776): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993182.310:3777): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993182.311:3778): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993182.342:3779): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993182.343:3780): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993182.414:3781): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993182.414:3782): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993182.474:3783): pid=30092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993182.474:3784): pid=30092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E696275757370636E79766F6665636E7467797664716975626A636B7A647373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993182.475:3785): pid=30092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993182.478:3786): pid=30092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993182.648:3787): pid=30092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993182.648:3788): pid=30092 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993182.652:3789): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993182.653:3790): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993182.672:3791): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993182.672:3792): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993182.732:3793): pid=30110 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993182.732:3794): pid=30110 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B716C647176777A697865736C7662777964676C697478666D6D766D7A616378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993182.733:3795): pid=30110 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993182.736:3796): pid=30110 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993182.928:3797): pid=30110 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993182.929:3798): pid=30110 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993182.933:3799): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993182.933:3800): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993182.953:3801): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993182.953:3802): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993182.988:3803): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993182.988:3804): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993183.043:3805): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993183.043:3806): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993183.077:3807): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993183.078:3808): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993183.093:3809): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993183.093:3810): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993183.129:3811): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993183.130:3812): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993183.169:3813): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993183.170:3814): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993183.229:3815): pid=30172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993183.229:3816): pid=30172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67736C6A6E69736B6A62776F6D61746B6D667464796F6D6D63797A73786C6F6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993183.230:3817): pid=30172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993183.231:3818): pid=30172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993183.407:3819): pid=30172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993183.407:3820): pid=30172 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993183.412:3821): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993183.412:3822): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993183.429:3823): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993183.429:3824): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993183.487:3825): pid=30190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993183.487:3826): pid=30190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7366726E636B7676746366666362657166796964757A6A71686A676670736F65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993183.488:3827): pid=30190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993183.491:3828): pid=30190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993183.673:3829): pid=30190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993183.673:3830): pid=30190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993183.677:3831): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993183.677:3832): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993183.698:3833): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993183.698:3834): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993183.727:3835): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993183.728:3836): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993183.779:3837): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993183.780:3838): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993183.814:3839): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993183.814:3840): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993183.833:3841): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993183.833:3842): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993183.874:3843): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993183.874:3844): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993183.931:3845): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993183.931:3846): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993183.956:3847): pid=30207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=30208 suid=74 rport=51838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993183.957:3848): pid=30207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=30208 suid=74 rport=51838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1780993183.998:3849): pid=30254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993183.999:3850): pid=30254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61656169647464787366786D6B656C756A6762667868716A636F627365627162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993183.999:3851): pid=30254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993184.002:3852): pid=30254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993184.209:3853): pid=30254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993184.210:3854): pid=30254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993184.215:3855): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993184.215:3856): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993184.238:3857): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993184.238:3858): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993184.292:3859): pid=30272 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993184.293:3860): pid=30272 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76766C7265736D73696871676F78687569656772766A747577776F6A6F7A6867203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993184.294:3861): pid=30272 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993184.297:3862): pid=30272 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993184.481:3863): pid=30272 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993184.481:3864): pid=30272 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993184.486:3865): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993184.486:3866): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993184.504:3867): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993184.505:3868): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993184.539:3869): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993184.540:3870): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993184.589:3871): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993184.590:3872): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993184.623:3873): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993184.624:3874): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993184.643:3875): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993184.643:3876): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993184.686:3877): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993184.686:3878): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993184.734:3879): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993184.734:3880): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993184.796:3881): pid=30334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993184.796:3882): pid=30334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7765756365766C6B717665747A68696B697A6D79726C6A6A70797267646172203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993184.797:3883): pid=30334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993184.799:3884): pid=30334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993184.980:3885): pid=30334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993184.980:3886): pid=30334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993184.984:3887): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993184.984:3888): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993185.001:3889): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993185.002:3890): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993185.060:3891): pid=30352 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993185.060:3892): pid=30352 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766F786678717662646F75646E73777164636D67686B7668616A666B68717079203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993185.061:3893): pid=30352 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993185.063:3894): pid=30352 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993185.091:3895): pid=30207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30208 suid=74 rport=51838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993185.092:3896): pid=30207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993185.093:3897): pid=30207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993185.254:3898): pid=30352 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993185.255:3899): pid=30352 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993185.258:3900): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993185.258:3901): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993185.286:3902): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993185.286:3903): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993185.321:3904): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993185.321:3905): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993185.369:3906): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993185.369:3907): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993185.404:3908): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993185.404:3909): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993185.425:3910): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993185.425:3911): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993185.463:3912): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993185.463:3913): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993185.508:3914): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993185.508:3915): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993185.568:3916): pid=30414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993185.569:3917): pid=30414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706B6E6F696A7768636C656D65656C677763726F707A7776687573617879777A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993185.569:3918): pid=30414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993185.572:3919): pid=30414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993185.743:3920): pid=30414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993185.743:3921): pid=30414 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993185.746:3922): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993185.746:3923): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993185.766:3924): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993185.766:3925): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993185.812:3926): pid=30432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993185.813:3927): pid=30432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67726C6C7776627263767878676E79767A6A61636865616162687A6864726365203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993185.813:3928): pid=30432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993185.816:3929): pid=30432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993185.965:3930): pid=30432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993185.965:3931): pid=30432 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993185.968:3932): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993185.969:3933): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993185.990:3934): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993185.990:3935): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993186.019:3936): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993186.019:3937): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993186.070:3938): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993186.070:3939): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993186.099:3940): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993186.099:3941): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993186.117:3942): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993186.117:3943): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993186.154:3944): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993186.154:3945): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993186.181:3946): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993186.181:3947): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993186.240:3948): pid=30494 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993186.241:3949): pid=30494 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6B677A68706C76776B6F7164776964796D6E62786F68706C7A706D7173766E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993186.241:3950): pid=30494 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993186.244:3951): pid=30494 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993186.415:3952): pid=30494 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993186.415:3953): pid=30494 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993186.419:3954): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993186.419:3955): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993186.442:3956): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993186.442:3957): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993186.499:3958): pid=30512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993186.499:3959): pid=30512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70676A6E6374616D646E68796F79796666746D6B7A736771666D696165657675203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993186.500:3960): pid=30512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993186.502:3961): pid=30512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993186.671:3962): pid=30512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993186.671:3963): pid=30512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993186.675:3964): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993186.675:3965): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993186.696:3966): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993186.696:3967): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993186.748:3968): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993186.748:3969): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993186.917:3970): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993186.917:3971): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993186.979:3972): pid=30542 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993186.979:3973): pid=30542 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6770637A7A6963626A786B73646F74686E77777A6962776E716D7576717A6568203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993186.980:3974): pid=30542 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993186.982:3975): pid=30542 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993187.143:3976): pid=30542 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993187.143:3977): pid=30542 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993187.147:3978): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993187.147:3979): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993187.389:3980): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993187.389:3981): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993187.412:3982): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993187.412:3983): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993187.433:3984): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993187.433:3985): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993187.469:3986): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993187.470:3987): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993187.493:3988): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993187.493:3989): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993187.553:3990): pid=30590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993187.554:3991): pid=30590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63616D65686C7A716B73667471636F6261797171656C72776E6475686D797570203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993187.554:3992): pid=30590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993187.557:3993): pid=30590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993187.731:3994): pid=30590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993187.731:3995): pid=30590 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993187.734:3996): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993187.734:3997): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993187.756:3998): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993187.756:3999): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993187.809:4000): pid=30608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993187.809:4001): pid=30608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7168756C7761666D6B797A626D77697572687A72627A667671696E746E746D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993187.810:4002): pid=30608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993187.812:4003): pid=30608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993187.990:4004): pid=30608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993187.991:4005): pid=30608 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993187.994:4006): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993187.994:4007): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993188.010:4008): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993188.011:4009): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993188.042:4010): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993188.042:4011): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993189.037:4012): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993189.037:4013): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993189.096:4014): pid=30639 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993189.097:4015): pid=30639 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F786174676E726E6D61687A77666A6662646576796D7062696262796E70677A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993189.098:4016): pid=30639 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993189.100:4017): pid=30639 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993189.412:4018): pid=30625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=30643 suid=74 rport=56810 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993189.412:4019): pid=30625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=30643 suid=74 rport=56810 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993192.179:4020): pid=30639 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993192.179:4021): pid=30639 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993192.182:4022): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993192.183:4023): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993192.612:4024): pid=30625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30643 suid=74 rport=56810 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993192.614:4025): pid=30625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993192.614:4026): pid=30625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993192.836:4027): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993192.836:4028): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993192.884:4029): pid=30658 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993192.884:4030): pid=30658 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6463726466726C766A7861736B767170746D6A6D7073736D6C72736262707A71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993192.885:4031): pid=30658 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993192.887:4032): pid=30658 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993193.168:4033): pid=30658 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993193.169:4034): pid=30658 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993193.172:4035): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993193.172:4036): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993193.192:4037): pid=30644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=30663 suid=74 rport=40114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993193.192:4038): pid=30644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=30663 suid=74 rport=40114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993193.218:4039): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993193.218:4040): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993193.275:4041): pid=30677 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993193.275:4042): pid=30677 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6567626B686A65706C6363727073786C73636663706F6C776575766562737479203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993193.276:4043): pid=30677 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993193.279:4044): pid=30677 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993193.581:4045): pid=30677 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993193.581:4046): pid=30677 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993193.585:4047): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993193.585:4048): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993193.714:4049): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993193.714:4050): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993193.773:4051): pid=30695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993193.773:4052): pid=30695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677273716A70676E626F71667674636C64696164756D6A73777A68736167737A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993193.774:4053): pid=30695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993193.776:4054): pid=30695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993194.291:4055): prog-id=125 op=LOAD
type=BPF msg=audit(1780993194.291:4056): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993194.293:4057): prog-id=126 op=LOAD
type=BPF msg=audit(1780993194.293:4058): prog-id=127 op=LOAD
type=BPF msg=audit(1780993194.293:4059): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993194.293:4060): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993194.295:4061): prog-id=128 op=LOAD
type=BPF msg=audit(1780993194.295:4062): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993194.297:4063): prog-id=129 op=LOAD
type=BPF msg=audit(1780993194.297:4064): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993194.297:4065): prog-id=130 op=LOAD
type=BPF msg=audit(1780993194.297:4066): prog-id=131 op=LOAD
type=BPF msg=audit(1780993194.297:4067): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993194.297:4068): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993194.298:4069): prog-id=132 op=LOAD
type=BPF msg=audit(1780993194.298:4070): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993194.298:4071): prog-id=133 op=LOAD
type=BPF msg=audit(1780993194.298:4072): prog-id=134 op=LOAD
type=BPF msg=audit(1780993194.298:4073): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993194.298:4074): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993194.403:4075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nftables comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993194.431:4076): pid=30695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993194.432:4077): pid=30695 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993194.435:4078): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993194.435:4079): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993194.711:4080): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993194.711:4081): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993194.739:4082): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993194.739:4083): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993194.766:4084): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993194.766:4085): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993194.801:4086): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993194.801:4087): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993194.822:4088): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993194.822:4089): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993194.886:4090): pid=30785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993194.886:4091): pid=30785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666D64766772686A756B696B616C6F676B6666727375656C6F70626A79626873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993194.887:4092): pid=30785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993194.891:4093): pid=30785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993195.061:4094): pid=30785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993195.061:4095): pid=30785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993195.064:4096): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993195.064:4097): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993195.092:4098): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993195.092:4099): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993195.123:4100): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993195.123:4101): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993195.144:4102): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993195.144:4103): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993195.174:4104): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993195.174:4105): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993195.199:4106): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993195.199:4107): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993195.255:4108): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993195.255:4109): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6870727374777862786674726A636E697275667961686F6F6C716E6C736D77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993195.256:4110): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993195.259:4111): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993195.428:4112): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993195.429:4113): pid=30828 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993195.432:4114): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993195.432:4115): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993195.454:4116): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993195.454:4117): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993195.484:4118): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993195.484:4119): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993195.579:4120): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993195.579:4121): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993195.638:4122): pid=30858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993195.638:4123): pid=30858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79666A6871756C7372766A6D687578706E74646E6771616871736B786A647361203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993195.639:4124): pid=30858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993195.641:4125): pid=30858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1780993195.811:4126): table=filter:2 family=10 entries=4 op=nft_register_chain pid=30861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1780993195.811:4126): table=raw:2 family=10 entries=3 op=nft_register_chain pid=30861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1780993195.811:4126): table=nat:2 family=2 entries=5 op=nft_register_chain pid=30861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1780993195.811:4126): table=raw:2 family=2 entries=3 op=nft_register_chain pid=30861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1780993195.811:4126): table=filter:2 family=2 entries=4 op=nft_register_chain pid=30861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1780993195.811:4126): table=nat:2 family=1 entries=5 op=nft_register_chain pid=30861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1780993195.811:4126): table=raw:2 family=1 entries=3 op=nft_register_chain pid=30861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1780993195.811:4126): table=filter:2 family=1 entries=4 op=nft_register_chain pid=30861 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1780993195.811:4126): arch=c000003e syscall=46 success=yes exit=2212 a0=3 a1=7ffc858b7280 a2=0 a3=7f2808d07bc4 items=0 ppid=30860 pid=30861 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993195.811:4126): proctitle=6E6674002D66002F6574632F6E667461626C65732F69707461626C65732E6E6674
type=USER_END msg=audit(1780993195.847:4127): pid=30858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993195.848:4128): pid=30858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993195.852:4129): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993195.852:4130): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993196.094:4131): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993196.094:4132): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993196.158:4133): pid=30876 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993196.158:4134): pid=30876 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666B727A7065786B6A776C756364676E67706B71717A766173756675746C6C6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993196.159:4135): pid=30876 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993196.161:4136): pid=30876 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993196.342:4137): pid=30876 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993196.343:4138): pid=30876 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993196.347:4139): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993196.347:4140): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993196.420:4141): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993196.421:4142): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993196.452:4143): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993196.452:4144): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993196.470:4145): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993196.471:4146): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993196.506:4147): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993196.507:4148): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993196.613:4149): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993196.613:4150): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993196.672:4151): pid=30925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993196.672:4152): pid=30925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71716264766B646D6B786B75776B726264637671677A67656A6C727265776F6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993196.673:4153): pid=30925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993196.675:4154): pid=30925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993196.840:4155): pid=30925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993196.840:4156): pid=30925 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993196.843:4157): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993196.843:4158): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993196.867:4159): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993196.868:4160): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993196.902:4161): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993196.902:4162): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993196.924:4163): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993196.924:4164): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993196.952:4165): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993196.952:4166): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993196.974:4167): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993196.974:4168): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993197.030:4169): pid=30968 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993197.030:4170): pid=30968 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72696A6F7A737467707A616870616B626F70756676766877797070696A7A6F65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993197.031:4171): pid=30968 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993197.033:4172): pid=30968 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993197.196:4173): pid=30968 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993197.196:4174): pid=30968 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993197.199:4175): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993197.199:4176): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993197.217:4177): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993197.217:4178): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993197.242:4179): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993197.243:4180): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993197.314:4181): pid=30644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30663 suid=74 rport=40114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993197.315:4182): pid=30644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993197.316:4183): pid=30644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993197.325:4184): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993197.325:4185): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993197.353:4186): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993197.354:4187): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993197.373:4188): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993197.373:4189): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993197.409:4190): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993197.409:4191): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993197.551:4192): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993197.552:4193): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993197.607:4194): pid=31031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993197.607:4195): pid=31031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C6476687A75796B6A716C666E6579646C746161616A6976726C677378667A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993197.608:4196): pid=31031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993197.610:4197): pid=31031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993197.776:4198): pid=31031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993197.776:4199): pid=31031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993197.779:4200): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993197.779:4201): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993197.802:4202): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993197.802:4203): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993197.837:4204): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993197.837:4205): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993197.858:4206): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993197.858:4207): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993197.888:4208): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993197.888:4209): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993197.942:4210): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993197.942:4211): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993198.002:4212): pid=31074 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993198.003:4213): pid=31074 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787A7776636C73666B707A746368657772666563736670797067656B617A7961203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993198.003:4214): pid=31074 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993198.006:4215): pid=31074 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993198.179:4216): pid=31074 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993198.180:4217): pid=31074 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993198.183:4218): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993198.183:4219): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993198.200:4220): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993198.200:4221): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993198.228:4222): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993198.229:4223): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993198.290:4224): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993198.291:4225): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993198.321:4226): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993198.321:4227): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993198.333:4228): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993198.333:4229): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993198.362:4230): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993198.362:4231): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993198.375:4232): pid=31017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31123 suid=74 rport=40128 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993198.375:4233): pid=31017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31123 suid=74 rport=40128 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993198.404:4234): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993198.404:4235): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993198.459:4236): pid=31137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993198.459:4237): pid=31137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B63767178626B646D6E6469666D6864776D6F6C7A756162786276766E646979203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993198.460:4238): pid=31137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993198.461:4239): pid=31137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993198.610:4240): pid=31137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993198.610:4241): pid=31137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993198.614:4242): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993198.614:4243): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993198.643:4244): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993198.643:4245): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993198.684:4246): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993198.684:4247): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993198.704:4248): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993198.704:4249): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993198.735:4250): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993198.735:4251): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993198.755:4252): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993198.755:4253): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993198.816:4254): pid=31181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993198.817:4255): pid=31181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6665676966626D6C6F766673767A636E78737A647473796D6E6E756A71676368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993198.817:4256): pid=31181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993198.819:4257): pid=31181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993198.890:4258): pid=31180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31183 suid=74 rport=19230 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993198.891:4259): pid=31180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31183 suid=74 rport=19230 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993198.987:4260): pid=31181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993198.988:4261): pid=31181 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993198.991:4262): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993198.991:4263): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993199.011:4264): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993199.011:4265): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993199.040:4266): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993199.040:4267): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993199.108:4268): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993199.108:4269): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993199.177:4270): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993199.177:4271): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993199.189:4272): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993199.189:4273): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993199.229:4274): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993199.229:4275): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993199.261:4276): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993199.261:4277): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993199.310:4278): pid=31244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993199.310:4279): pid=31244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6775726D65706C77766974656D686775697170716262706E63687A6472627062203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993199.310:4280): pid=31244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993199.313:4281): pid=31244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993199.443:4282): pid=31180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31183 suid=74 rport=19230 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993199.444:4283): pid=31180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.147 addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993199.444:4284): pid=31180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993199.490:4285): pid=31244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993199.490:4286): pid=31244 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993199.494:4287): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993199.494:4288): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993199.513:4289): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993199.513:4290): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993199.546:4291): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993199.546:4292): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993199.567:4293): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993199.567:4294): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993199.593:4295): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993199.593:4296): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993199.615:4297): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993199.615:4298): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993199.664:4299): pid=31287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993199.664:4300): pid=31287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F7271657A69756562797270686F72646A6D626B676A6C6C71756279696867203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993199.665:4301): pid=31287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993199.667:4302): pid=31287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993199.844:4303): pid=31287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993199.844:4304): pid=31287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993199.849:4305): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993199.849:4306): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993199.871:4307): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993199.872:4308): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993199.907:4309): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993199.907:4310): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993200.005:4311): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993200.005:4312): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993200.038:4313): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993200.039:4314): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993200.064:4315): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993200.064:4316): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993200.100:4317): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993200.100:4318): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993200.578:4319): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993200.578:4320): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993200.637:4321): pid=31349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993200.638:4322): pid=31349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B6761656268756F66726D736F777476797A6E6D6D756175686B7A676B646A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993200.638:4323): pid=31349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993200.640:4324): pid=31349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993200.797:4325): pid=31349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993200.798:4326): pid=31349 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993200.802:4327): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993200.802:4328): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993200.828:4329): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993200.829:4330): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993200.865:4331): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993200.865:4332): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993200.889:4333): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993200.889:4334): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993200.919:4335): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993200.919:4336): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993200.941:4337): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993200.941:4338): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993201.000:4339): pid=31392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993201.000:4340): pid=31392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75686D74626775636F6F627869616F6968736965636D656C706B6D6E75646D79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993201.001:4341): pid=31392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993201.003:4342): pid=31392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993201.174:4343): pid=31392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993201.175:4344): pid=31392 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993201.179:4345): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993201.179:4346): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993201.200:4347): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993201.200:4348): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993201.201:4349): pid=31017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31123 suid=74 rport=40128 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993201.202:4350): pid=31017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993201.202:4351): pid=31017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993201.230:4352): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993201.230:4353): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993201.327:4354): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993201.327:4355): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993201.386:4356): pid=31422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993201.386:4357): pid=31422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71736E6277696D667A706E6F69736C6664627663677A79787A62646574776467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993201.387:4358): pid=31422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993201.390:4359): pid=31422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993201.875:4360): pid=31422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993201.876:4361): pid=31422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993201.879:4362): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993201.879:4363): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993201.971:4364): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993201.971:4365): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993202.027:4366): pid=31490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993202.027:4367): pid=31490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6778747370617A79716866736E6E616E787563626A7577647A6462776A646F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993202.028:4368): pid=31490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993202.030:4369): pid=31490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993202.232:4370): pid=31490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993202.232:4371): pid=31490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993202.235:4372): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993202.235:4373): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993202.386:4374): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993202.386:4375): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993202.424:4376): pid=31507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993202.424:4377): pid=31507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78617763696F6766686A736A6174786C72767374716E646871686E73746E6162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993202.425:4378): pid=31507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993202.426:4379): pid=31507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1780993202.565:4380): table=filter:3 family=1 entries=1 op=nft_register_chain pid=31510 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1780993202.565:4380): arch=c000003e syscall=46 success=yes exit=92 a0=3 a1=7fff5a15dcd0 a2=0 a3=7fb7ea8f0bc4 items=0 ppid=31509 pid=31510 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993202.565:4380): proctitle=6E6674002D66002F6574632F6E667461626C65732F747269706C656F2D636861696E732E6E6674
type=USER_END msg=audit(1780993202.576:4381): pid=31507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993202.576:4382): pid=31507 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993202.580:4383): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993202.580:4384): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993202.669:4385): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993202.670:4386): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993202.725:4387): pid=31524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993202.725:4388): pid=31524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7965636174766E706C656B7766756F7661676F766965686A6B6C796B73616761203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993202.725:4389): pid=31524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993202.727:4390): pid=31524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1780993202.888:4391): table=filter:4 family=1 entries=49 op=nft_register_chain pid=31529 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1780993202.888:4391): arch=c000003e syscall=46 success=yes exit=11396 a0=3 a1=7fff5546f4f0 a2=0 a3=7f4b918ccbc4 items=0 ppid=31527 pid=31529 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993202.888:4391): proctitle=6E6674002D66002D
type=USER_END msg=audit(1780993202.903:4392): pid=31524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993202.904:4393): pid=31524 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993202.907:4394): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993202.907:4395): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993203.026:4396): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993203.026:4397): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993203.083:4398): pid=31543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993203.083:4399): pid=31543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73756C766D6B6B6D716A74706976736E6F79627465696569626B7777676A6373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993203.084:4400): pid=31543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993203.086:4401): pid=31543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993203.156:4402): pid=31428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31546 suid=74 rport=51674 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993203.156:4403): pid=31428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31546 suid=74 rport=51674 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993203.258:4404): pid=31543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993203.258:4405): pid=31543 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993203.262:4406): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993203.262:4407): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993203.303:4408): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993203.303:4409): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993203.357:4410): pid=31560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993203.357:4411): pid=31560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73686D726F74766F756E6F626F6D63717774636C67626F6B7A7A72646671706E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993203.358:4412): pid=31560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993203.360:4413): pid=31560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993203.573:4414): pid=31560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993203.573:4415): pid=31560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993203.577:4416): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993203.577:4417): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993203.859:4418): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993203.859:4419): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993203.916:4420): pid=31576 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993203.916:4421): pid=31576 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F786B647277677769747563697A7377696D7973766572756E746D77677471203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993203.916:4422): pid=31576 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993203.918:4423): pid=31576 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993204.231:4424): bool=logrotate_read_inside_containers val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=SYSCALL msg=audit(1780993204.231:4424): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffe7404da6e a2=2 a3=0 items=0 ppid=31576 pid=31578 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993204.231:4424): proctitle="/usr/bin/python3"
type=USER_END msg=audit(1780993204.756:4425): pid=31576 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993204.756:4426): pid=31576 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993204.760:4427): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993204.761:4428): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993205.662:4429): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993205.662:4430): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993205.719:4431): pid=31596 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993205.719:4432): pid=31596 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686C6C6479776B6D6E68766F6C786A6973656C6F6A6E6666616B6C6969696673203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993205.720:4433): pid=31596 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993205.726:4434): pid=31596 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993205.906:4435): pid=31596 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993205.906:4436): pid=31596 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993205.911:4437): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993205.911:4438): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993205.969:4439): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993205.969:4440): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993206.032:4441): pid=31612 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993206.032:4442): pid=31612 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7364627675686F6C6D776E696F707A71736D787465726A65706278647976656A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993206.033:4443): pid=31612 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993206.036:4444): pid=31612 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993206.213:4445): pid=31612 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993206.213:4446): pid=31612 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993206.217:4447): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993206.217:4448): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993206.304:4449): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993206.305:4450): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993206.361:4451): pid=31628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993206.361:4452): pid=31628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72797A71656A627572646F656A6B787477666E6D70626E6D62616B7A6D71626E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993206.361:4453): pid=31628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993206.363:4454): pid=31628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993206.947:4455): pid=31428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31546 suid=74 rport=51674 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993206.949:4456): pid=31428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993206.949:4457): pid=31428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780993207.789:4458): pid=31632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31648 suid=74 rport=51680 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993207.789:4459): pid=31632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31648 suid=74 rport=51680 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993211.049:4460): pid=31628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993211.049:4461): pid=31628 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993211.053:4462): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993211.053:4463): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993211.307:4464): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993211.307:4465): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993211.365:4466): pid=31760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993211.365:4467): pid=31760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63726E6263656E73776272646D747673637065776C6E71726E787A64617A6B71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993211.366:4468): pid=31760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993211.369:4469): pid=31760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993212.157:4470): pid=31632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31648 suid=74 rport=51680 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993212.158:4471): pid=31632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993212.158:4472): pid=31632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=MAC_POLICY_LOAD msg=audit(1780993212.285:4473): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1780993212.285:4473): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7f79e5600000 a2=361c2b a3=0 items=0 ppid=31762 pid=31767 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993212.285:4473): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993212.437:4474): pid=31762 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/etc/iscsi(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1780993212.475:4475): pid=31760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993212.475:4476): pid=31760 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993212.480:4477): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993212.480:4478): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993212.528:4479): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993212.528:4480): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993212.591:4481): pid=31782 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993212.592:4482): pid=31782 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A756B78716364786F627677766577786E6A6865646878726C706C736B6E7372203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993212.592:4483): pid=31782 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993212.598:4484): pid=31782 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993213.408:4485): pid=31768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31789 suid=74 rport=40290 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993213.408:4486): pid=31768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31789 suid=74 rport=40290 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=MAC_POLICY_LOAD msg=audit(1780993213.488:4487): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1780993213.488:4487): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7f41ee800000 a2=361c2b a3=0 items=0 ppid=31784 pid=31790 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993213.488:4487): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993213.689:4488): pid=31784 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/etc/target(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1780993213.741:4489): pid=31782 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993213.741:4490): pid=31782 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993213.746:4491): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993213.746:4492): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993213.797:4493): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993213.797:4494): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993213.859:4495): pid=31804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993213.859:4496): pid=31804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71696E6F7164656C64656C697A626B6A626C6B7A706E6B6E71676A6465717162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993213.860:4497): pid=31804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993213.864:4498): pid=31804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1780993214.849:4499): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1780993214.849:4499): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7f549f600000 a2=361c2b a3=0 items=0 ppid=31806 pid=31811 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993214.849:4499): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993215.010:4500): pid=31806 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/var/lib/iscsi(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1780993215.066:4501): pid=31804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993215.067:4502): pid=31804 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993215.072:4503): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993215.072:4504): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993215.157:4505): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993215.157:4506): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993215.221:4507): pid=31825 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993215.221:4508): pid=31825 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777763667076776E7173796B706C6A706361766D6D6162777164647663617A71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993215.222:4509): pid=31825 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993215.227:4510): pid=31825 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993215.356:4511): pid=31768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31789 suid=74 rport=40290 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993215.358:4512): pid=31768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993215.358:4513): pid=31768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993215.399:4514): pid=31825 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993215.400:4515): pid=31825 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993215.403:4516): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993215.403:4517): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993215.447:4518): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993215.447:4519): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993215.502:4520): pid=31841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993215.503:4521): pid=31841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61696D69667671726D6173706C6369776A756E75676677796164716968647572203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993215.503:4522): pid=31841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993215.506:4523): pid=31841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993215.684:4524): pid=31841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993215.685:4525): pid=31841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993215.689:4526): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993215.689:4527): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993215.730:4528): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993215.730:4529): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993215.790:4530): pid=31858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993215.790:4531): pid=31858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636D6B6B7471697066657A6D637770797A66747272646C76796A657477676A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993215.791:4532): pid=31858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993215.794:4533): pid=31858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993215.969:4534): pid=31858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993215.969:4535): pid=31858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993215.973:4536): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993215.973:4537): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993216.070:4538): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993216.070:4539): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993216.131:4540): pid=31874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993216.131:4541): pid=31874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73746A64796977676F6A6D67746C736671687464617468657A69757378646968203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993216.132:4542): pid=31874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993216.134:4543): pid=31874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993216.293:4544): pid=31844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31877 suid=74 rport=40302 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993216.293:4545): pid=31844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31877 suid=74 rport=40302 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993216.312:4546): pid=31874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993216.312:4547): pid=31874 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993216.316:4548): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993216.316:4549): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993216.447:4550): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993216.447:4551): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993216.508:4552): pid=31891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993216.508:4553): pid=31891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7671646777726F6E6A6A7264716778616E656A797A63626169706B72666368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993216.509:4554): pid=31891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993216.511:4555): pid=31891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993216.712:4556): pid=31891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993216.712:4557): pid=31891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993216.715:4558): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993216.715:4559): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993216.988:4560): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993216.988:4561): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993217.038:4562): pid=31908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993217.038:4563): pid=31908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786366647074757971686C7163706F726C69617467716E7979646E6B6B696378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993217.039:4564): pid=31908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993217.042:4565): pid=31908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993219.134:4566): pid=31844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31877 suid=74 rport=40302 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993219.135:4567): pid=31844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993219.135:4568): pid=31844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1780993220.166:4569): pid=31910 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="dracut-config-generic-057-21.git20230214.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993220.354:4570): pid=31912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31913 suid=74 rport=40310 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993220.354:4571): pid=31912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=31913 suid=74 rport=40310 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993220.959:4572): pid=31908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993220.959:4573): pid=31908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993220.963:4574): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993220.963:4575): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993221.036:4576): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993221.036:4577): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993221.088:4578): pid=31927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993221.089:4579): pid=31927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63706D747676686670776974656E766264736E706C746F65676D75617961636A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993221.089:4580): pid=31927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993221.092:4581): pid=31927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993221.256:4582): pid=31927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993221.256:4583): pid=31927 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993221.259:4584): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993221.259:4585): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993221.324:4586): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993221.325:4587): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993221.350:4588): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993221.351:4589): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993221.371:4590): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993221.371:4591): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993221.405:4592): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993221.406:4593): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993221.452:4594): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993221.452:4595): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993221.514:4596): pid=31975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993221.514:4597): pid=31975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7573726369716175786777706F6C766B627A7A72727768716673786179716E68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993221.516:4598): pid=31975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993221.518:4599): pid=31975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993221.703:4600): pid=31975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993221.703:4601): pid=31975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993221.706:4602): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993221.707:4603): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993221.733:4604): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993221.734:4605): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993221.766:4606): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993221.766:4607): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993221.788:4608): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993221.788:4609): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993221.818:4610): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993221.819:4611): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993221.840:4612): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993221.841:4613): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993221.932:4614): pid=32018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993221.932:4615): pid=32018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B717675697A61646C6476696963626A6C706D7775686374666377756D666269203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993221.933:4616): pid=32018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993221.935:4617): pid=32018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993222.102:4618): pid=32018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993222.103:4619): pid=32018 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993222.106:4620): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993222.107:4621): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993222.127:4622): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993222.127:4623): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993222.155:4624): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993222.155:4625): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993222.246:4626): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993222.246:4627): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993222.312:4628): pid=32048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993222.312:4629): pid=32048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6879636B736E76696B6A786E747178616D7169626E676D686C6F616670736370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993222.313:4630): pid=32048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993222.315:4631): pid=32048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993222.602:4632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993222.699:4633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993222.727:4634): pid=32048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993222.727:4635): pid=32048 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993222.731:4636): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993222.731:4637): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993222.809:4638): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993222.809:4639): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993222.837:4640): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993222.837:4641): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993222.856:4642): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993222.856:4643): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993222.894:4644): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993222.894:4645): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993222.930:4646): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993222.930:4647): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993222.985:4648): pid=32102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993222.986:4649): pid=32102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F746A61676769686261637279627471656B617A7465786463747162797066203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993222.986:4650): pid=32102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993222.989:4651): pid=32102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993223.144:4652): pid=32102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993223.144:4653): pid=32102 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993223.148:4654): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993223.148:4655): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993223.175:4656): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993223.176:4657): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993223.212:4658): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993223.212:4659): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993223.233:4660): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993223.233:4661): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993223.262:4662): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993223.262:4663): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993223.281:4664): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993223.281:4665): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993223.334:4666): pid=32145 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993223.335:4667): pid=32145 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71617665786D6E7974796A6874706C6C7763616D6978616962666C646B786562203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993223.336:4668): pid=32145 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993223.339:4669): pid=32145 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993223.487:4670): pid=32145 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993223.488:4671): pid=32145 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993223.493:4672): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993223.493:4673): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993223.514:4674): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993223.514:4675): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993223.548:4676): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993223.548:4677): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993223.662:4678): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993223.662:4679): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993223.725:4680): pid=32175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993223.726:4681): pid=32175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656474687A6E7069697077757875616A61686D6B727A696F6C686C736E747669203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993223.727:4682): pid=32175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993223.729:4683): pid=32175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993223.914:4684): pid=32175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993223.915:4685): pid=32175 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993223.918:4686): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993223.918:4687): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993223.964:4688): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993223.964:4689): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993224.026:4690): pid=32193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993224.026:4691): pid=32193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69696B7363656472677264706D616D6A7475676A7A7864666274746C66717179203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993224.026:4692): pid=32193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993224.029:4693): pid=32193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993224.231:4694): pid=32193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993224.231:4695): pid=32193 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993224.234:4696): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993224.234:4697): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993224.305:4698): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993224.305:4699): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993224.363:4700): pid=32211 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993224.364:4701): pid=32211 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646574776377636B6E6B6B6778756C776F74626F6570757374776A6A61616978203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993224.364:4702): pid=32211 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993224.367:4703): pid=32211 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993224.554:4704): pid=32211 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993224.554:4705): pid=32211 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993224.557:4706): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993224.557:4707): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993224.625:4708): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993224.625:4709): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993224.682:4710): pid=32228 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993224.682:4711): pid=32228 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62687278757564716A716C716A706163647672757A626F667570686B736B7576203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993224.683:4712): pid=32228 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993224.686:4713): pid=32228 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993224.852:4714): pid=32228 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993224.852:4715): pid=32228 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993224.855:4716): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993224.855:4717): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993224.941:4718): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993224.941:4719): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993225.000:4720): pid=32245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993225.000:4721): pid=32245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7A656466646B6F7776626A6578726267706163776B7A706464647A68726762203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993225.001:4722): pid=32245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993225.003:4723): pid=32245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993225.181:4724): pid=32245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993225.182:4725): pid=32245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993225.185:4726): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993225.185:4727): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993225.262:4728): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993225.262:4729): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993225.320:4730): pid=32262 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993225.320:4731): pid=32262 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6876677566686B657067777A647965676574666563726E656A6D6F6F717873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993225.321:4732): pid=32262 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993225.323:4733): pid=32262 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993226.034:4734): pid=31912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31913 suid=74 rport=40310 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993226.035:4735): pid=31912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993226.035:4736): pid=31912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993226.518:4737): pid=32262 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993226.519:4738): pid=32262 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993226.523:4739): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993226.523:4740): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993226.593:4741): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993226.593:4742): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993226.644:4743): pid=32281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993226.644:4744): pid=32281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C656669716B63736A616A6868656A6E78626E756D647A626863696F716F74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993226.645:4745): pid=32281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993226.647:4746): pid=32281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993226.819:4747): pid=32281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993226.819:4748): pid=32281 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993226.823:4749): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993226.823:4750): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993226.892:4751): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993226.892:4752): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993226.951:4753): pid=32299 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993226.952:4754): pid=32299 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6675646D7264786F766A6F697776626161636C716E70726B6D75736F796C6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993226.952:4755): pid=32299 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993226.955:4756): pid=32299 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993227.132:4757): pid=32299 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993227.132:4758): pid=32299 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993227.134:4759): pid=32267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=32304 suid=74 rport=38324 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993227.134:4760): pid=32267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=32304 suid=74 rport=38324 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993227.136:4761): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993227.136:4762): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993227.204:4763): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993227.204:4764): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993227.253:4765): pid=32318 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993227.254:4766): pid=32318 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786770697A6E6D746C6C76657262676D67747262706867687774796C6272716A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993227.254:4767): pid=32318 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993227.256:4768): pid=32318 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993227.445:4769): pid=32318 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993227.445:4770): pid=32318 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993227.448:4771): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993227.448:4772): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993227.518:4773): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993227.518:4774): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993227.578:4775): pid=32336 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993227.579:4776): pid=32336 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647A716470747776726765717A71747069767268796F6E64696468736D67756F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993227.579:4777): pid=32336 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993227.582:4778): pid=32336 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993227.764:4779): pid=32336 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993227.765:4780): pid=32336 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993227.768:4781): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993227.768:4782): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993227.843:4783): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993227.843:4784): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993227.891:4785): pid=32354 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993227.891:4786): pid=32354 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F736D796E7364626E6B77697975637662766B787675616B6276716762646161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993227.892:4787): pid=32354 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993227.894:4788): pid=32354 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993228.070:4789): pid=32354 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993228.070:4790): pid=32354 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993228.073:4791): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993228.074:4792): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993228.142:4793): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993228.142:4794): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993228.196:4795): pid=32372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993228.196:4796): pid=32372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616869636F757272686C67786A6573766E68727A786D67787078616665667163203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993228.197:4797): pid=32372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993228.199:4798): pid=32372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993228.382:4799): pid=32372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993228.382:4800): pid=32372 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993228.385:4801): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993228.385:4802): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993228.455:4803): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993228.455:4804): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993228.509:4805): pid=32390 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993228.510:4806): pid=32390 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72736A706E737467626E6473626E626166686373627572646A747061736E6B68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993228.510:4807): pid=32390 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993228.511:4808): pid=32390 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993228.686:4809): pid=32390 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993228.686:4810): pid=32390 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993228.689:4811): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993228.689:4812): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993228.758:4813): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993228.759:4814): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993228.815:4815): pid=32407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993228.816:4816): pid=32407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6962657372667A787A6C73776E637766676C6E6D6A706365696466796274626F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993228.816:4817): pid=32407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993228.819:4818): pid=32407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993229.024:4819): pid=32407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993229.025:4820): pid=32407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993229.027:4821): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993229.027:4822): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993229.075:4823): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993229.075:4824): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993229.130:4825): pid=32424 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993229.130:4826): pid=32424 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6A766F73786D7A76736B6E78626C7A6A7A756B6E6D73676D67707975776373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993229.130:4827): pid=32424 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993229.132:4828): pid=32424 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993229.283:4829): pid=32424 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993229.284:4830): pid=32424 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993229.287:4831): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993229.287:4832): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993229.358:4833): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993229.358:4834): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993229.393:4835): pid=32441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993229.393:4836): pid=32441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B756F686E7278736F6967626F766A77706F6672696B7A667162647A73677072203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993229.394:4837): pid=32441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993229.396:4838): pid=32441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993229.579:4839): pid=32441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993229.579:4840): pid=32441 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993229.583:4841): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993229.583:4842): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993229.624:4843): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993229.625:4844): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993229.679:4845): pid=32458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993229.679:4846): pid=32458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74787862686F6A6666636C6964696D6B686377656A7A6775646175706F726877203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993229.680:4847): pid=32458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993229.681:4848): pid=32458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993229.760:4849): pid=32267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32304 suid=74 rport=38324 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993229.761:4850): pid=32267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993229.761:4851): pid=32267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993229.868:4852): pid=32458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993229.869:4853): pid=32458 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993229.872:4854): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993229.872:4855): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993229.984:4856): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993229.984:4857): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993230.042:4858): pid=32477 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993230.043:4859): pid=32477 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6770736A6366797764637771686279666B776E7A72636B7968796B63786777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993230.043:4860): pid=32477 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993230.046:4861): pid=32477 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993230.336:4862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993230.363:4863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993230.382:4864): pid=32477 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993230.382:4865): pid=32477 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993230.386:4866): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993230.386:4867): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993230.516:4868): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993230.516:4869): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993230.576:4870): pid=32497 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993230.576:4871): pid=32497 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656D726E76767265646B6F666C686B7A6B636C6D6162766F6D6A6478656F6566203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993230.577:4872): pid=32497 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993230.579:4873): pid=32497 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993230.722:4874): pid=32461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=32500 suid=74 rport=39026 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993230.723:4875): pid=32461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=32500 suid=74 rport=39026 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993230.757:4876): pid=32497 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993230.757:4877): pid=32497 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993230.761:4878): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993230.761:4879): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993230.832:4880): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993230.832:4881): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993230.890:4882): pid=32514 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993230.890:4883): pid=32514 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6569656B796B63636E7866777574746179687873726E626A7273797A72636863203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993230.891:4884): pid=32514 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993230.894:4885): pid=32514 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993231.074:4886): pid=32514 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993231.074:4887): pid=32514 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993231.077:4888): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993231.077:4889): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993231.187:4890): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993231.187:4891): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993231.248:4892): pid=32530 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993231.248:4893): pid=32530 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647171766463766B616E67726C77646B6661616D6F716D706B74657178746361203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993231.249:4894): pid=32530 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993231.251:4895): pid=32530 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993231.423:4896): pid=32530 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993231.423:4897): pid=32530 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993231.427:4898): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993231.427:4899): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993231.494:4900): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993231.494:4901): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993231.550:4902): pid=32546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993231.551:4903): pid=32546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7978646C64656C7262726B6C6C627463616768626E6C7A756473766D68726763203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993231.551:4904): pid=32546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993231.554:4905): pid=32546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993231.747:4906): pid=32546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993231.747:4907): pid=32546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993231.751:4908): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993231.751:4909): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993231.804:4910): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993231.804:4911): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993231.868:4912): pid=32562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993231.868:4913): pid=32562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6773626B7261637265626A6B677863736C7A6766746F7A6C786275746B636B71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993231.869:4914): pid=32562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993231.872:4915): pid=32562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993232.056:4916): pid=32562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993232.056:4917): pid=32562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993232.060:4918): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993232.060:4919): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993232.168:4920): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993232.169:4921): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993232.232:4922): pid=32578 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993232.232:4923): pid=32578 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C616B6E6166646D756A6E6A706A6F636B626F68757164677574786C627777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993232.233:4924): pid=32578 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993232.235:4925): pid=32578 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993232.414:4926): pid=32578 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993232.415:4927): pid=32578 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993232.418:4928): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993232.419:4929): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993232.525:4930): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993232.525:4931): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993232.586:4932): pid=32594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993232.587:4933): pid=32594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7677636A6D6F6B67666A696763776271636E626C6674696772666A6967616B61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993232.587:4934): pid=32594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993232.590:4935): pid=32594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1780993232.934:4936): bool=virt_sandbox_use_netlink val=1 old_val=0 auid=1002 ses=13AUID="tripleo-admin"
type=SYSCALL msg=audit(1780993232.934:4936): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffc55f68a3e a2=2 a3=0 items=0 ppid=32594 pid=32596 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993232.934:4936): proctitle="/usr/bin/python3"
type=USER_END msg=audit(1780993233.475:4937): pid=32594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993233.475:4938): pid=32594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993233.480:4939): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993233.480:4940): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993233.569:4941): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993233.569:4942): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993233.635:4943): pid=32614 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993233.635:4944): pid=32614 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A62657269626D6C7661736B776869726C63667972747874787A676E77617465203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993233.636:4945): pid=32614 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993233.642:4946): pid=32614 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993233.830:4947): pid=32614 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993233.831:4948): pid=32614 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993233.834:4949): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993233.835:4950): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993233.877:4951): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993233.877:4952): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993233.934:4953): pid=32630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993233.934:4954): pid=32630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656469616E73756564676A6D66696B65757670706373756B687874627768756F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993233.935:4955): pid=32630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993233.939:4956): pid=32630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993233.953:4957): pid=32461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32500 suid=74 rport=39026 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993233.955:4958): pid=32461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993233.955:4959): pid=32461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993234.094:4960): pid=32630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993234.094:4961): pid=32630 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993234.098:4962): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993234.098:4963): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993234.190:4964): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993234.190:4965): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993234.242:4966): pid=32647 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993234.242:4967): pid=32647 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697977677874766F68676B7169737379656A6377656E646261786D74656A6C7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993234.243:4968): pid=32647 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993234.245:4969): pid=32647 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=ADD_GROUP msg=audit(1780993234.448:4970): pid=32650 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=GRP_MGMT msg=audit(1780993234.451:4971): pid=32650 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=USER_END msg=audit(1780993234.494:4972): pid=32647 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993234.495:4973): pid=32647 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993234.498:4974): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993234.499:4975): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993234.561:4976): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993234.561:4977): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993234.623:4978): pid=32669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993234.623:4979): pid=32669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D796F6370766B6E6C617770746F71716C6468617475766179726573676B71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993234.624:4980): pid=32669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993234.626:4981): pid=32669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=ADD_USER msg=audit(1780993234.829:4982): pid=32673 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="qemu" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MGMT msg=audit(1780993234.880:4983): pid=32673 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-home-dir id=107 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=USER_END msg=audit(1780993234.913:4984): pid=32669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993234.914:4985): pid=32669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993234.918:4986): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993234.918:4987): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993235.010:4988): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993235.010:4989): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993235.064:4990): pid=32693 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993235.065:4991): pid=32693 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686D6B63636A6172766366626D796B726C7A6967626E63706F73636C61677773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993235.065:4992): pid=32693 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993235.067:4993): pid=32693 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993235.101:4994): pid=32633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=32696 suid=74 rport=39042 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993235.101:4995): pid=32633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=32696 suid=74 rport=39042 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=MAC_POLICY_LOAD msg=audit(1780993235.957:4996): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1780993235.957:4996): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7f0531600000 a2=361c2b a3=0 items=0 ppid=32695 pid=32701 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993235.957:4996): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993236.130:4997): pid=32695 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/var/lib/rabbitmq(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1780993236.178:4998): pid=32693 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993236.178:4999): pid=32693 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993236.184:5000): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993236.184:5001): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993236.288:5002): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993236.289:5003): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993236.359:5004): pid=32715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993236.359:5005): pid=32715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C717A6D7561637566656F7772746E756572796F71787A647777627579757A65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993236.360:5006): pid=32715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993236.368:5007): pid=32715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993236.561:5008): pid=32715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993236.561:5009): pid=32715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993236.565:5010): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993236.565:5011): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993236.622:5012): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993236.622:5013): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993236.675:5014): pid=32731 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993236.676:5015): pid=32731 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626969766E67776E75667169707865686775757A64746670766378726B657867203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993236.676:5016): pid=32731 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993236.679:5017): pid=32731 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993236.864:5018): pid=32731 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993236.864:5019): pid=32731 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993236.869:5020): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993236.869:5021): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993236.966:5022): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993236.966:5023): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993237.025:5024): pid=32747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993237.025:5025): pid=32747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F6B6F7777636D766974726C747169616761776C6B69706A75656C6F786268203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993237.026:5026): pid=32747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993237.028:5027): pid=32747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993237.306:5028): pid=32747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993237.306:5029): pid=32747 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993237.310:5030): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993237.310:5031): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993237.566:5032): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993237.567:5033): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993237.614:5034): pid=32765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993237.615:5035): pid=32765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A6A6E7978627862786C736A6B626E6A756E6D7562756664766A7770637263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993237.615:5036): pid=32765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993237.617:5037): pid=32765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993237.801:5038): pid=32765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993237.801:5039): pid=32765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993237.805:5040): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993237.805:5041): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993237.892:5042): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993237.892:5043): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993237.955:5044): pid=32781 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993237.955:5045): pid=32781 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6773747063766661726F7271777A7866616B687068626278627875736B777368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993237.956:5046): pid=32781 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993237.958:5047): pid=32781 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993238.129:5048): pid=32781 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993238.129:5049): pid=32781 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993238.132:5050): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993238.132:5051): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993238.215:5052): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993238.215:5053): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993238.266:5054): pid=32797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993238.266:5055): pid=32797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696F73707A6C746A747A6766637873766B656E747262746F7068686E656B6C73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993238.267:5056): pid=32797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993238.270:5057): pid=32797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993238.573:5058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993238.584:5059): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993238.590:5060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993238.590:5061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993238.593:5062): prog-id=135 op=LOAD
type=BPF msg=audit(1780993238.594:5063): prog-id=136 op=LOAD
type=BPF msg=audit(1780993238.594:5064): prog-id=137 op=LOAD
type=BPF msg=audit(1780993238.594:5065): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993238.594:5066): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993238.657:5067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993238.686:5068): pid=32797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993238.686:5069): pid=32797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993238.690:5070): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993238.690:5071): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993239.406:5072): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993239.406:5073): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993239.462:5074): pid=32821 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993239.463:5075): pid=32821 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D61666C7276637879786573776A6A6B616E6A6162646B7170696E746A676973203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993239.463:5076): pid=32821 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993239.466:5077): pid=32821 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993239.894:5078): pid=32633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32696 suid=74 rport=39042 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993239.896:5079): pid=32633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993239.897:5080): pid=32633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780993240.789:5081): pid=32825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=32826 suid=74 rport=54692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993240.789:5082): pid=32825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=32826 suid=74 rport=54692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993242.575:5083): pid=32821 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993242.576:5084): pid=32821 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993242.579:5085): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993242.579:5086): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993242.672:5087): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993242.672:5088): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993242.726:5089): pid=32840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993242.726:5090): pid=32840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B63776474626F7365697073656967686574726F73776763796C7761726B6B62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993242.729:5091): pid=32840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993242.731:5092): pid=32840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993243.158:5093): pid=32840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993243.158:5094): pid=32840 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993243.162:5095): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993243.162:5096): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993243.400:5097): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993243.400:5098): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993243.458:5099): pid=32901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993243.459:5100): pid=32901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64667772696D706C6E6E796175696476616A7667777679716C767370767A6471203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993243.459:5101): pid=32901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993243.464:5102): pid=32901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993243.629:5103): pid=32901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993243.630:5104): pid=32901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993243.634:5105): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993243.634:5106): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993243.737:5107): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993243.737:5108): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993243.800:5109): pid=32917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993243.800:5110): pid=32917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67797667666A6F6467696B71787363627A637875797178636F68677A6F6B6E7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993243.801:5111): pid=32917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993243.804:5112): pid=32917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993243.881:5113): pid=32825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32826 suid=74 rport=54692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993243.882:5114): pid=32825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993243.883:5115): pid=32825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993244.077:5116): pid=32917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993244.077:5117): pid=32917 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993244.081:5118): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993244.081:5119): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993244.175:5120): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993244.175:5121): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993244.206:5122): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993244.206:5123): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993244.230:5124): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993244.230:5125): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993244.267:5126): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993244.267:5127): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993244.414:5128): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993244.414:5129): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993244.472:5130): pid=32977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993244.472:5131): pid=32977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6A7365666A627870756578796C647A686C6A786670716D7A6B6F766170617A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993244.473:5132): pid=32977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993244.477:5133): pid=32977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993244.636:5134): pid=32977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993244.637:5135): pid=32977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993244.640:5136): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993244.640:5137): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993244.668:5138): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993244.668:5139): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993244.703:5140): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993244.703:5141): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993244.729:5142): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993244.729:5143): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993244.760:5144): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993244.760:5145): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993244.786:5146): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993244.786:5147): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993244.843:5148): pid=33020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993244.843:5149): pid=33020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A6A72786A7673767069716B786C74736E626C6366757862766D7478726169203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993244.844:5150): pid=33020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993244.847:5151): pid=33020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993245.025:5152): pid=33020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993245.025:5153): pid=33020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993245.028:5154): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993245.028:5155): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993245.051:5156): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993245.051:5157): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993245.080:5158): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993245.080:5159): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993245.095:5160): pid=32931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=33037 suid=74 rport=54696 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993245.095:5161): pid=32931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=33037 suid=74 rport=54696 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993245.157:5162): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993245.157:5163): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993245.187:5164): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993245.187:5165): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993245.208:5166): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993245.208:5167): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993245.242:5168): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993245.242:5169): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993245.356:5170): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993245.356:5171): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993245.414:5172): pid=33083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993245.414:5173): pid=33083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66796B666B716368666F66756E6A6B7279617672617962766D66677678717873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993245.415:5174): pid=33083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993245.417:5175): pid=33083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993245.602:5176): pid=33083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993245.603:5177): pid=33083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993245.608:5178): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993245.608:5179): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993245.633:5180): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993245.633:5181): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993245.670:5182): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993245.670:5183): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993245.691:5184): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993245.691:5185): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993245.723:5186): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993245.723:5187): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993245.745:5188): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993245.745:5189): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993245.805:5190): pid=33128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993245.805:5191): pid=33128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6276766F77617A65747A687272736A62727268766978647A676B71696E636463203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993245.806:5192): pid=33128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993245.810:5193): pid=33128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993245.983:5194): pid=33128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993245.983:5195): pid=33128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993245.987:5196): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993245.988:5197): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993246.009:5198): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993246.010:5199): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993246.041:5200): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993246.041:5201): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993246.136:5202): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993246.136:5203): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993246.195:5204): pid=33158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993246.195:5205): pid=33158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67756676796B6C616569797A7878737A716B747A6470626A76727A6F6E726B78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993246.196:5206): pid=33158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993246.199:5207): pid=33158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993246.376:5208): pid=33158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993246.376:5209): pid=33158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993246.379:5210): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993246.379:5211): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993246.437:5212): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993246.437:5213): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993246.490:5214): pid=33174 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993246.490:5215): pid=33174 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617977787776706F7266737A7771616F6E616D7378636A73796A7174676E6872203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993246.491:5216): pid=33174 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993246.494:5217): pid=33174 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993246.663:5218): pid=33174 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993246.664:5219): pid=33174 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993246.668:5220): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993246.668:5221): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993246.725:5222): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993246.725:5223): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993246.785:5224): pid=33190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993246.785:5225): pid=33190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737968787073626B676D6E696D6861646B6D6F6B756C716F777663766A736E79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993246.785:5226): pid=33190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993246.788:5227): pid=33190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993246.961:5228): pid=33190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993246.961:5229): pid=33190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993246.965:5230): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993246.965:5231): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993247.015:5232): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993247.015:5233): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993247.068:5234): pid=33206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993247.069:5235): pid=33206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72736B6575756A7267677761737363716F716D636A72636164676A786D797876203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993247.069:5236): pid=33206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993247.072:5237): pid=33206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993247.274:5238): pid=33206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993247.274:5239): pid=33206 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993247.278:5240): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993247.278:5241): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993247.595:5242): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993247.595:5243): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993247.627:5244): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993247.627:5245): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993247.647:5246): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993247.647:5247): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993247.684:5248): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993247.684:5249): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993247.708:5250): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993247.708:5251): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993247.766:5252): pid=33254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993247.766:5253): pid=33254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656F706A697A796D657A66756273716E6B6866686F716461647862626C7A7074203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993247.767:5254): pid=33254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993247.769:5255): pid=33254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993247.925:5256): pid=33254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993247.926:5257): pid=33254 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993247.929:5258): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993247.930:5259): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993247.956:5260): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993247.956:5261): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993247.992:5262): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993247.992:5263): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993248.014:5264): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993248.014:5265): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993248.042:5266): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993248.042:5267): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993248.063:5268): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993248.063:5269): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993248.118:5270): pid=33297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993248.119:5271): pid=33297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C707A65756D6271776768736273786D71687963676D6268766D73616D6F7477203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993248.119:5272): pid=33297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993248.122:5273): pid=33297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993248.295:5274): pid=33297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993248.296:5275): pid=33297 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993248.299:5276): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993248.299:5277): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993248.319:5278): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993248.319:5279): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993248.347:5280): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993248.347:5281): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993248.412:5282): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993248.412:5283): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993248.466:5284): pid=32931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=33037 suid=74 rport=54696 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993248.467:5285): pid=32931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993248.468:5286): pid=32931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993248.469:5287): pid=33327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993248.470:5288): pid=33327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C746B71667470777767787278736F726A6667797677656C676368707164736E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993248.471:5289): pid=33327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993248.473:5290): pid=33327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993248.630:5291): pid=33327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993248.631:5292): pid=33327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993248.634:5293): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993248.634:5294): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993248.695:5295): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993248.695:5296): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993248.750:5297): pid=33344 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993248.750:5298): pid=33344 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6871646762646F6765636F616C6D646C6773737763697A71756B6F6D757665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993248.751:5299): pid=33344 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993248.753:5300): pid=33344 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993248.910:5301): pid=33344 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993248.911:5302): pid=33344 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993248.914:5303): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993248.914:5304): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993249.103:5305): pid=33330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=33347 suid=74 rport=54702 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993249.103:5306): pid=33330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=33347 suid=74 rport=54702 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993249.203:5307): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993249.204:5308): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993249.261:5309): pid=33361 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993249.261:5310): pid=33361 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6B6A6B676E7972776B6A6A6C726879617263686E6B796C6A71787A72677964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993249.261:5311): pid=33361 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993249.264:5312): pid=33361 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993251.483:5313): pid=33330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=33347 suid=74 rport=54702 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993251.484:5314): pid=33330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993251.484:5315): pid=33330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993252.312:5316): pid=33361 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993252.312:5317): pid=33361 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993252.316:5318): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993252.316:5319): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993252.660:5320): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993252.660:5321): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993252.692:5322): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993252.693:5323): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993252.706:5324): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993252.706:5325): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993252.709:5326): pid=33365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=33379 suid=74 rport=38310 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993252.709:5327): pid=33365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=33379 suid=74 rport=38310 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993252.737:5328): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993252.737:5329): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993252.799:5330): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993252.799:5331): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993252.857:5332): pid=33412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993252.857:5333): pid=33412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7664636E657269796378617673646B6D647974666E79686E6470766478626264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993252.858:5334): pid=33412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993252.861:5335): pid=33412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993253.054:5336): pid=33412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993253.055:5337): pid=33412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993253.058:5338): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993253.059:5339): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993253.082:5340): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993253.082:5341): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993253.118:5342): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993253.118:5343): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993253.140:5344): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993253.140:5345): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993253.170:5346): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993253.171:5347): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993253.194:5348): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993253.194:5349): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993253.252:5350): pid=33457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993253.252:5351): pid=33457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627464687674676C6A636E72737474706967766D697968796F69746273786766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993253.253:5352): pid=33457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993253.256:5353): pid=33457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993253.488:5354): pid=33457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993253.488:5355): pid=33457 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993253.491:5356): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993253.492:5357): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993253.510:5358): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993253.510:5359): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993253.537:5360): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993253.538:5361): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993253.699:5362): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993253.699:5363): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993253.750:5364): pid=33488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993253.750:5365): pid=33488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797472697A737A63646A656D627669767362687679697562757475626F626979203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993253.751:5366): pid=33488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993253.752:5367): pid=33488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993254.062:5368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993254.079:5369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993254.107:5370): pid=33488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993254.108:5371): pid=33488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993254.111:5372): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993254.111:5373): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993254.236:5374): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993254.237:5375): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993254.297:5376): pid=33508 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993254.297:5377): pid=33508 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7574636A636677616E7A787A6F6C79746667646E6163746D6B676775786F6E6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993254.298:5378): pid=33508 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993254.301:5379): pid=33508 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993254.497:5380): pid=33508 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993254.497:5381): pid=33508 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993254.500:5382): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993254.500:5383): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993254.997:5384): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993254.997:5385): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993255.058:5386): pid=33526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993255.058:5387): pid=33526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71756768616569667A716A74617A74766F75786B76616776706B6377667A6B7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993255.059:5388): pid=33526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993255.062:5389): pid=33526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993255.242:5390): pid=33526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993255.242:5391): pid=33526 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993255.245:5392): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993255.245:5393): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993255.414:5394): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993255.414:5395): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993255.473:5396): pid=33544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993255.474:5397): pid=33544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707978636D6A6E68687A73676A747975737565686A726B78616674616679797A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993255.475:5398): pid=33544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993255.478:5399): pid=33544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993257.294:5400): pid=33365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=33379 suid=74 rport=38310 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993257.295:5401): pid=33365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993257.296:5402): pid=33365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993258.625:5403): pid=33544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993258.625:5404): pid=33544 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993258.628:5405): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993258.628:5406): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993258.948:5407): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993258.948:5408): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993258.981:5409): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993258.981:5410): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993259.004:5411): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993259.004:5412): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993259.039:5413): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993259.039:5414): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993259.189:5415): pid=33581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993259.190:5416): pid=33548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=33581 suid=74 rport=38322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993259.190:5417): pid=33548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=33581 suid=74 rport=38322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993259.244:5418): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993259.245:5419): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993259.294:5420): pid=33595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993259.294:5421): pid=33595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757A6862626C736879706D7871647168736C69676565657675706E766766676A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993259.295:5422): pid=33595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993259.297:5423): pid=33595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993259.487:5424): pid=33595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993259.487:5425): pid=33595 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993259.490:5426): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993259.490:5427): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993259.523:5428): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993259.523:5429): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993259.553:5430): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993259.553:5431): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993259.577:5432): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993259.577:5433): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993259.601:5434): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993259.601:5435): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993259.629:5436): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993259.629:5437): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993259.698:5438): pid=33640 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993259.698:5439): pid=33640 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62756B6565786A6B7764697A7277656F6D6B656675656168647468797A797861203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993259.698:5440): pid=33640 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993259.701:5441): pid=33640 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993259.880:5442): pid=33640 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993259.881:5443): pid=33640 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993259.885:5444): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993259.885:5445): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993259.907:5446): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993259.907:5447): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993259.939:5448): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993259.939:5449): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993260.196:5450): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993260.197:5451): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993260.245:5452): pid=33670 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993260.245:5453): pid=33670 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E776C766566686474647068686179697068666F6F7566676A6A7164746769203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993260.245:5454): pid=33670 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993260.247:5455): pid=33670 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993260.571:5456): pid=33670 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993260.572:5457): pid=33670 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993260.575:5458): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993260.575:5459): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993260.696:5460): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993260.697:5461): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993260.757:5462): pid=33688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993260.757:5463): pid=33688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A626C6978716A667A646D617A6F72746D6C6B696B636C7A776967676D7765203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993260.758:5464): pid=33688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993260.760:5465): pid=33688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993261.057:5466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993261.060:5467): prog-id=138 op=LOAD
type=BPF msg=audit(1780993261.069:5468): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993261.120:5469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993261.148:5470): pid=33688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993261.148:5471): pid=33688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993261.152:5472): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993261.152:5473): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993261.323:5474): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993261.323:5475): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993261.355:5476): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993261.355:5477): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993261.374:5478): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993261.374:5479): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993261.411:5480): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993261.411:5481): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993261.435:5482): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993261.435:5483): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993261.492:5484): pid=33744 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993261.493:5485): pid=33744 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7171656A6F69647875757564726B66796A796D6C6D646E6D676B6B7564646475203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993261.493:5486): pid=33744 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993261.497:5487): pid=33744 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993261.675:5488): pid=33744 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993261.676:5489): pid=33744 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993261.680:5490): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993261.680:5491): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993261.713:5492): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993261.713:5493): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993261.743:5494): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993261.743:5495): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993261.769:5496): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993261.769:5497): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993261.797:5498): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993261.797:5499): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993261.823:5500): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993261.823:5501): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993261.886:5502): pid=33787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993261.887:5503): pid=33787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736F777A6269776D787578646D736270647A667877636C7869747378646D6A64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993261.887:5504): pid=33787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993261.891:5505): pid=33787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993262.080:5506): pid=33787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993262.080:5507): pid=33787 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993262.084:5508): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993262.084:5509): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993262.111:5510): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993262.111:5511): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993262.140:5512): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993262.140:5513): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993262.265:5514): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993262.265:5515): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993262.313:5516): pid=33548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=33581 suid=74 rport=38322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993262.314:5517): pid=33548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33581 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993262.314:5518): pid=33548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993262.315:5519): pid=33548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33548 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993262.315:5520): pid=33548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993262.322:5521): pid=33817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993262.322:5522): pid=33817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74667161707A6962766873796B77747464676A77796E6B686262797A666C7063203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993262.323:5523): pid=33817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993262.325:5524): pid=33817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993262.793:5525): prog-id=139 op=LOAD
type=BPF msg=audit(1780993262.793:5526): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993262.795:5527): prog-id=140 op=LOAD
type=BPF msg=audit(1780993262.795:5528): prog-id=141 op=LOAD
type=BPF msg=audit(1780993262.795:5529): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993262.795:5530): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993262.797:5531): prog-id=142 op=LOAD
type=BPF msg=audit(1780993262.797:5532): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993262.799:5533): prog-id=143 op=LOAD
type=BPF msg=audit(1780993262.799:5534): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993262.799:5535): prog-id=144 op=LOAD
type=BPF msg=audit(1780993262.799:5536): prog-id=145 op=LOAD
type=BPF msg=audit(1780993262.799:5537): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993262.799:5538): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993262.800:5539): prog-id=146 op=LOAD
type=BPF msg=audit(1780993262.800:5540): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993262.800:5541): prog-id=147 op=LOAD
type=BPF msg=audit(1780993262.800:5542): prog-id=148 op=LOAD
type=BPF msg=audit(1780993262.800:5543): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993262.800:5544): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993263.034:5545): prog-id=149 op=LOAD
type=BPF msg=audit(1780993263.034:5546): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993263.036:5547): prog-id=150 op=LOAD
type=BPF msg=audit(1780993263.036:5548): prog-id=151 op=LOAD
type=BPF msg=audit(1780993263.036:5549): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993263.036:5550): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993263.038:5551): prog-id=152 op=LOAD
type=BPF msg=audit(1780993263.038:5552): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993263.039:5553): prog-id=153 op=LOAD
type=BPF msg=audit(1780993263.039:5554): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993263.040:5555): prog-id=154 op=LOAD
type=BPF msg=audit(1780993263.040:5556): prog-id=155 op=LOAD
type=BPF msg=audit(1780993263.040:5557): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993263.040:5558): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993263.040:5559): prog-id=156 op=LOAD
type=BPF msg=audit(1780993263.040:5560): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993263.040:5561): prog-id=157 op=LOAD
type=BPF msg=audit(1780993263.040:5562): prog-id=158 op=LOAD
type=BPF msg=audit(1780993263.040:5563): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993263.040:5564): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993263.067:5565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chrony-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993263.067:5566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chrony-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993263.095:5567): pid=33817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993263.096:5568): pid=33817 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993263.100:5569): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993263.100:5570): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993263.133:5571): pid=33897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993263.134:5572): pid=33820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=33897 suid=74 rport=53842 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993263.134:5573): pid=33820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=33897 suid=74 rport=53842 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993263.302:5574): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993263.302:5575): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993263.366:5576): pid=33911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993263.367:5577): pid=33911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6470756B67706A67746D6278686176786764756E666C626D6A66766461696A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993263.367:5578): pid=33911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993263.371:5579): pid=33911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993263.523:5580): pid=33911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993263.523:5581): pid=33911 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993263.527:5582): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993263.527:5583): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993263.622:5584): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993263.622:5585): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993263.679:5586): pid=33928 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993263.679:5587): pid=33928 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78637562686F65686473656B677A666364786364617574686263696976647766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993263.680:5588): pid=33928 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993263.682:5589): pid=33928 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993266.095:5590): pid=33933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993266.372:5591): pid=33932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=33933 suid=74 rport=40098 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993266.372:5592): pid=33932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=33933 suid=74 rport=40098 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993267.843:5593): pid=33932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=33933 suid=74 rport=40098 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993267.844:5594): pid=33932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33933 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993267.844:5595): pid=33932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993267.844:5596): pid=33932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33932 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993267.845:5597): pid=33932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993269.272:5598): pid=33820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=33897 suid=74 rport=53842 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993269.272:5599): pid=33820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33897 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993269.272:5600): pid=33820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993269.273:5601): pid=33820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993269.273:5602): pid=33820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993270.476:5603): pid=33935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33935 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993270.477:5604): pid=33934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=33935 suid=74 rport=54274 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993270.477:5605): pid=33934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=33935 suid=74 rport=54274 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993273.860:5606): pid=33928 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993273.860:5607): pid=33928 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993273.867:5608): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993273.867:5609): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993273.957:5610): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993273.957:5611): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993274.018:5612): pid=33949 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993274.019:5613): pid=33949 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76737576796D6E716F717379696E696B776E6F7577736274776F68647A71666F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993274.019:5614): pid=33949 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993274.023:5615): pid=33949 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993274.193:5616): pid=33949 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993274.194:5617): pid=33949 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993274.198:5618): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993274.198:5619): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993274.272:5620): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993274.272:5621): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993274.329:5622): pid=33966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993274.329:5623): pid=33966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796D6A65696A696C6E776C6D71776D77626E75676E6D74637A616F7578617362203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993274.330:5624): pid=33966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993274.332:5625): pid=33966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993274.511:5626): pid=33966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993274.512:5627): pid=33966 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993274.516:5628): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993274.516:5629): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993274.522:5630): pid=33934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=33935 suid=74 rport=54274 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993274.523:5631): pid=33934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33935 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993274.523:5632): pid=33934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993274.524:5633): pid=33934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33934 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993274.524:5634): pid=33934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993274.676:5635): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993274.676:5636): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993274.737:5637): pid=33984 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993274.737:5638): pid=33984 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78666D666E636C67786A676E6868736F777774717377746D6A6B657464707561203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993274.738:5639): pid=33984 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993274.741:5640): pid=33984 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993274.918:5641): prog-id=159 op=LOAD
type=BPF msg=audit(1780993274.919:5642): prog-id=160 op=LOAD
type=BPF msg=audit(1780993274.919:5643): prog-id=161 op=LOAD
type=SERVICE_START msg=audit(1780993274.996:5644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993275.057:5645): pid=33984 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993275.057:5646): pid=33984 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993275.062:5647): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993275.062:5648): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993275.501:5649): pid=33991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993275.503:5650): pid=33972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=33991 suid=74 rport=54276 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993275.503:5651): pid=33972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=33991 suid=74 rport=54276 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993275.701:5652): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993275.701:5653): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993275.760:5654): pid=34005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993275.761:5655): pid=34005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A696C6470616D6E6A65756364646176746B797361696B76667771776178616B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993275.761:5656): pid=34005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993275.764:5657): pid=34005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993275.945:5658): pid=34005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993275.946:5659): pid=34005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993275.949:5660): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993275.949:5661): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993276.136:5662): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993276.136:5663): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993276.194:5664): pid=34022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993276.195:5665): pid=34022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65746E6F6670706C6B6B6E6B6E6F6963697179617565686A6B6269766F6E6663203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993276.195:5666): pid=34022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993276.198:5667): pid=34022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993276.374:5668): pid=34022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993276.374:5669): pid=34022 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993276.378:5670): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993276.378:5671): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993276.691:5672): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993276.691:5673): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993276.752:5674): pid=34039 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993276.752:5675): pid=34039 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777571616561767277756764767971737767646B6F726E687770717A756B736E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993276.753:5676): pid=34039 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993276.755:5677): pid=34039 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993276.917:5678): pid=34039 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993276.917:5679): pid=34039 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993276.921:5680): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993276.921:5681): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993277.016:5682): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993277.016:5683): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993277.068:5684): pid=34055 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993277.068:5685): pid=34055 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707464707178747762737275656A6D7A75656A79756778767164676470766369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993277.069:5686): pid=34055 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993277.070:5687): pid=34055 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993277.234:5688): pid=34055 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993277.235:5689): pid=34055 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993277.238:5690): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993277.238:5691): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993278.970:5692): pid=33972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=33991 suid=74 rport=54276 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993278.970:5693): pid=33972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33991 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993278.971:5694): pid=33972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993278.972:5695): pid=33972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993278.972:5696): pid=33972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993279.962:5697): pid=34059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993279.963:5698): pid=34058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34059 suid=74 rport=54278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993279.963:5699): pid=34058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34059 suid=74 rport=54278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993282.578:5700): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993282.578:5701): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993282.636:5702): pid=34073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993282.637:5703): pid=34073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7677757267717676787A6B6871676C70687A6E687865646F777A70726F6373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993282.637:5704): pid=34073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993282.640:5705): pid=34073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993282.809:5706): pid=34073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993282.809:5707): pid=34073 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993282.813:5708): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993282.814:5709): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993282.887:5710): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993282.887:5711): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993282.925:5712): pid=34089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993282.925:5713): pid=34089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716574787969736671626C77626270686B6F6E6D6665656D787A69756D61647A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993282.925:5714): pid=34089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993282.927:5715): pid=34089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993283.068:5716): pid=34089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993283.068:5717): pid=34089 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993283.071:5718): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993283.071:5719): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993283.121:5720): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993283.121:5721): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993283.165:5722): pid=34105 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993283.165:5723): pid=34105 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7A786D6977647378646B726D7A786F657A7765636F6272746162656D676B74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993283.166:5724): pid=34105 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993283.168:5725): pid=34105 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993283.343:5726): pid=34105 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993283.344:5727): pid=34105 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993283.347:5728): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993283.347:5729): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993283.422:5730): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993283.422:5731): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993283.479:5732): pid=34121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993283.479:5733): pid=34121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6171746C6978767968736A6A65786A6874626B6B757A797078726B766C72776D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993283.480:5734): pid=34121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993283.482:5735): pid=34121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993283.642:5736): pid=34121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993283.642:5737): pid=34121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993283.646:5738): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993283.646:5739): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993283.717:5740): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993283.717:5741): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993283.771:5742): pid=34137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993283.771:5743): pid=34137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A716A6A737868796B747372656B6270686C6D71676E716C646D776676646B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993283.772:5744): pid=34137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993283.774:5745): pid=34137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993283.948:5746): pid=34137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993283.949:5747): pid=34137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993283.952:5748): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993283.952:5749): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993284.038:5750): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993284.038:5751): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993284.086:5752): pid=34153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993284.086:5753): pid=34153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776C617579696B6A76766C657276617A64746F69666F7A6D6B786A6568746C62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993284.087:5754): pid=34153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993284.089:5755): pid=34153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993284.152:5756): pid=34058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=34059 suid=74 rport=54278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993284.152:5757): pid=34058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34059 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993284.153:5758): pid=34058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993284.153:5759): pid=34058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993284.153:5760): pid=34058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993284.482:5761): pid=34157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34157 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993284.492:5762): pid=34156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34157 suid=74 rport=56108 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993284.492:5763): pid=34156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34157 suid=74 rport=56108 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=MAC_POLICY_LOAD msg=audit(1780993284.972:5764): auid=1002 ses=13 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1780993284.972:5764): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7f9332000000 a2=361c2b a3=0 items=0 ppid=34155 pid=34162 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993284.972:5764): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1780993285.149:5765): pid=34155 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/container-config-scripts(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1780993285.194:5766): pid=34153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993285.195:5767): pid=34153 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993285.200:5768): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993285.200:5769): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993285.262:5770): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993285.262:5771): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993285.331:5772): pid=34176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993285.331:5773): pid=34176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716770686B7376707766707878756E757763747765776C756D706B7573716F6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993285.332:5774): pid=34176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993285.338:5775): pid=34176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993285.517:5776): pid=34176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993285.518:5777): pid=34176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993285.521:5778): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993285.521:5779): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993285.755:5780): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993285.755:5781): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993285.815:5782): pid=34192 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993285.815:5783): pid=34192 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7370777A626561687A696B70627278756E7874766761737A716C7973656368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993285.816:5784): pid=34192 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993285.818:5785): pid=34192 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993285.994:5786): pid=34192 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993285.994:5787): pid=34192 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993285.998:5788): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993285.998:5789): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993286.081:5790): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993286.081:5791): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993286.114:5792): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993286.114:5793): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993286.132:5794): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993286.132:5795): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993286.168:5796): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993286.168:5797): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993286.199:5798): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993286.199:5799): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993286.261:5800): pid=34240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993286.262:5801): pid=34240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65706966756266766D6D616864786C6F6D68626F6272787A7779637078646D6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993286.262:5802): pid=34240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993286.265:5803): pid=34240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993286.431:5804): pid=34240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993286.431:5805): pid=34240 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993286.435:5806): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993286.435:5807): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993286.462:5808): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993286.462:5809): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993286.495:5810): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993286.495:5811): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993286.522:5812): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993286.522:5813): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993286.552:5814): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993286.552:5815): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993286.577:5816): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993286.577:5817): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993286.578:5818): pid=34156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=34157 suid=74 rport=56108 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993286.579:5819): pid=34156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34157 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993286.580:5820): pid=34156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993286.580:5821): pid=34156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34156 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993286.580:5822): pid=34156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993286.637:5823): pid=34283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993286.637:5824): pid=34283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A63736963686477616973776F646C67777571696E76737A7867787872676874203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993286.638:5825): pid=34283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993286.640:5826): pid=34283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993286.808:5827): pid=34283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993286.808:5828): pid=34283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993286.812:5829): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993286.812:5830): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993286.830:5831): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993286.830:5832): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993286.856:5833): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993286.856:5834): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993287.047:5835): pid=34301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993287.048:5836): pid=34286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34301 suid=74 rport=56110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993287.048:5837): pid=34286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34301 suid=74 rport=56110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993287.145:5838): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993287.145:5839): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993287.205:5840): pid=34315 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993287.206:5841): pid=34315 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65657679797674616C646B6765677970706B6C72726A6C766279696163616C6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993287.207:5842): pid=34315 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993287.208:5843): pid=34315 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993287.385:5844): pid=34315 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993287.386:5845): pid=34315 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993287.389:5846): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993287.389:5847): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993287.473:5848): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993287.473:5849): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993287.531:5850): pid=34331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993287.531:5851): pid=34331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78697065756179636C7A68766A6E707A646E69766E726C6368687761637A7172203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993287.532:5852): pid=34331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993287.534:5853): pid=34331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993287.699:5854): pid=34331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993287.699:5855): pid=34331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993287.702:5856): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993287.702:5857): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993287.784:5858): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993287.784:5859): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993287.825:5860): pid=34347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993287.826:5861): pid=34347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66646D6E647961746D6873637A686972776C75717078646879787A6D73726E72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993287.826:5862): pid=34347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993287.829:5863): pid=34347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993288.001:5864): pid=34347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993288.001:5865): pid=34347 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993288.005:5866): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993288.005:5867): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993288.262:5868): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993288.262:5869): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993288.315:5870): pid=34363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993288.315:5871): pid=34363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73717772656875677A6F6B79776970666A796E6E6A6268796C71737879677275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993288.315:5872): pid=34363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993288.316:5873): pid=34363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993288.455:5874): pid=34363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993288.455:5875): pid=34363 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993288.459:5876): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993288.459:5877): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993289.592:5878): pid=34286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=34301 suid=74 rport=56110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993289.592:5879): pid=34286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34301 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993289.593:5880): pid=34286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993289.594:5881): pid=34286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993289.594:5882): pid=34286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993290.229:5883): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993290.229:5884): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993290.263:5885): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993290.263:5886): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993290.284:5887): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993290.284:5888): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993290.321:5889): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993290.321:5890): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993290.347:5891): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993290.347:5892): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993290.404:5893): pid=34412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993290.404:5894): pid=34412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A66757A6D7461677766796B77776E646A757268767A6766746D6D6477617978203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993290.405:5895): pid=34412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993290.408:5896): pid=34412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993290.564:5897): pid=34412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993290.564:5898): pid=34412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993290.569:5899): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993290.569:5900): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993290.601:5901): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993290.601:5902): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993290.633:5903): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993290.633:5904): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993290.652:5905): pid=34428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993290.653:5906): pid=34366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34428 suid=74 rport=39918 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993290.653:5907): pid=34366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34428 suid=74 rport=39918 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993290.657:5908): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993290.657:5909): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993290.690:5910): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993290.690:5911): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993290.714:5912): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993290.714:5913): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993290.764:5914): pid=34456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993290.764:5915): pid=34456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736778637669687967726C6D747371617667686674686E69686C63666C627564203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993290.764:5916): pid=34456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993290.767:5917): pid=34456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993290.943:5918): pid=34456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993290.943:5919): pid=34456 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993290.946:5920): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993290.946:5921): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993290.967:5922): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993290.967:5923): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993290.989:5924): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993290.989:5925): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993291.046:5926): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993291.046:5927): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993291.105:5928): pid=34486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993291.105:5929): pid=34486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7675657075637571666A716F6F776274797679666564716A706D78797A6579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993291.106:5930): pid=34486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993291.108:5931): pid=34486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993291.262:5932): pid=34486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993291.263:5933): pid=34486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993291.266:5934): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993291.266:5935): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993291.574:5936): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993291.574:5937): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993291.607:5938): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993291.608:5939): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993291.625:5940): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993291.625:5941): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993291.666:5942): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993291.667:5943): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993291.689:5944): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993291.689:5945): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993291.751:5946): pid=34536 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993291.751:5947): pid=34536 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64646D726D6667656E7162647A776461756F6F62697171776963776264616A6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993291.752:5948): pid=34536 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993291.755:5949): pid=34536 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993291.919:5950): pid=34536 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993291.920:5951): pid=34536 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993291.923:5952): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993291.923:5953): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993291.950:5954): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993291.950:5955): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993291.983:5956): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993291.984:5957): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993292.008:5958): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993292.008:5959): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993292.039:5960): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993292.040:5961): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993292.063:5962): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993292.064:5963): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993292.121:5964): pid=34579 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993292.122:5965): pid=34579 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63686B717067646E6C6B6E6D7662696F7674786D6F76677768626E6C75737275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993292.123:5966): pid=34579 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993292.126:5967): pid=34579 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993292.296:5968): pid=34579 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993292.296:5969): pid=34579 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993292.300:5970): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993292.300:5971): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993292.321:5972): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993292.321:5973): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993292.351:5974): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993292.351:5975): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993292.550:5976): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993292.550:5977): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993292.606:5978): pid=34609 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993292.606:5979): pid=34609 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E72667574677577636164697865726A7568627176737669786B6D7A726B78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993292.607:5980): pid=34609 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993292.609:5981): pid=34609 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993292.753:5982): pid=34609 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993292.754:5983): pid=34609 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993292.757:5984): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993292.758:5985): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993292.977:5986): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993292.977:5987): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993293.009:5988): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993293.010:5989): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993293.028:5990): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993293.028:5991): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993293.064:5992): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993293.064:5993): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993293.088:5994): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993293.088:5995): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993293.149:5996): pid=34657 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993293.149:5997): pid=34657 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7070716176707065637261706263716A7363776C6F75716461636D786268747A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993293.150:5998): pid=34657 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993293.152:5999): pid=34657 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993293.319:6000): pid=34657 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993293.319:6001): pid=34657 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993293.323:6002): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993293.324:6003): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993293.351:6004): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993293.351:6005): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993293.388:6006): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993293.388:6007): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993293.412:6008): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993293.412:6009): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993293.445:6010): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993293.445:6011): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993293.472:6012): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993293.473:6013): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993293.531:6014): pid=34700 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993293.531:6015): pid=34700 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766E6467636A73657871636C697A716277696C76716C6F636573667879627170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993293.532:6016): pid=34700 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993293.535:6017): pid=34700 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993293.711:6018): pid=34700 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993293.711:6019): pid=34700 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993293.714:6020): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993293.714:6021): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993293.741:6022): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993293.742:6023): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993293.769:6024): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993293.769:6025): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993294.080:6026): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993294.080:6027): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993294.138:6028): pid=34730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993294.138:6029): pid=34730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6C73756170736B667178716B676F726B627562646F647A627967707A626B71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993294.139:6030): pid=34730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993294.141:6031): pid=34730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993294.320:6032): pid=34730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993294.321:6033): pid=34730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993294.324:6034): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993294.325:6035): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993295.045:6036): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993295.045:6037): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993295.109:6038): pid=34746 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993295.109:6039): pid=34746 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657665776E7577706374666B776679727867657178776E75616E796372716E78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993295.110:6040): pid=34746 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993295.114:6041): pid=34746 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993295.309:6042): pid=34746 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993295.309:6043): pid=34746 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993295.314:6044): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993295.314:6045): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993295.417:6046): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993295.417:6047): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993295.476:6048): pid=34763 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993295.476:6049): pid=34763 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7663776D73776E63746465616C64706F7A67746B6562646A797A746B70757071203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993295.476:6050): pid=34763 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993295.479:6051): pid=34763 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993295.599:6052): pid=34366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=34428 suid=74 rport=39918 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993295.599:6053): pid=34366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34428 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993295.600:6054): pid=34366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993295.601:6055): pid=34366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34366 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993295.601:6056): pid=34366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993295.660:6057): pid=34763 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993295.660:6058): pid=34763 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993295.663:6059): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993295.663:6060): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993295.774:6061): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993295.774:6062): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993295.830:6063): pid=34779 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993295.830:6064): pid=34779 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76696A636C73656E656C68656E6A6273616B7268786B77647264717374646378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993295.831:6065): pid=34779 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993295.833:6066): pid=34779 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993296.428:6067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993296.442:6068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993296.471:6069): pid=34779 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993296.471:6070): pid=34779 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993296.475:6071): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993296.475:6072): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993296.711:6073): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993296.711:6074): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993296.769:6075): pid=34802 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993296.769:6076): pid=34802 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F786872786767697A6D697A676672717379776879756E766D7A656D7667776A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993296.770:6077): pid=34802 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993296.773:6078): pid=34802 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993297.238:6079): pid=34818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993297.239:6080): pid=34782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34818 suid=74 rport=39922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993297.239:6081): pid=34782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34818 suid=74 rport=39922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993300.709:6082): pid=34782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=34818 suid=74 rport=39922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993300.709:6083): pid=34782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34818 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993300.710:6084): pid=34782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993300.711:6085): pid=34782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34782 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993300.711:6086): pid=34782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993301.539:6087): pid=34860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993301.540:6088): pid=34844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34860 suid=74 rport=33264 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993301.540:6089): pid=34844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34860 suid=74 rport=33264 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993301.981:6090): pid=34862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34862 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993302.185:6091): pid=34861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=34862 suid=74 rport=35998 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993302.185:6092): pid=34861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=34862 suid=74 rport=35998 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993303.299:6093): pid=34861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=34862 suid=74 rport=35998 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993303.299:6094): pid=34861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34862 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993303.300:6095): pid=34861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993303.300:6096): pid=34861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993303.300:6097): pid=34861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993304.202:6098): pid=34844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=34860 suid=74 rport=33264 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993304.203:6099): pid=34844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34860 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993304.203:6100): pid=34844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993304.204:6101): pid=34844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993304.204:6102): pid=34844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993305.062:6103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993305.070:6104): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993305.070:6105): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993305.070:6106): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993305.390:6107): pid=34890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993305.391:6108): pid=34887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34890 suid=74 rport=33274 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993305.391:6109): pid=34887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34890 suid=74 rport=33274 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993305.814:6110): pid=34802 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993305.814:6111): pid=34802 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993305.819:6112): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993305.819:6113): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993305.969:6114): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993305.969:6115): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993306.006:6116): pid=34904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993306.006:6117): pid=34904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D78736B697665717670717878636A687373666B65657074796C7971746D67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993306.007:6118): pid=34904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993306.009:6119): pid=34904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993306.223:6120): pid=34904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993306.224:6121): pid=34904 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993306.227:6122): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993306.227:6123): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993306.388:6124): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993306.388:6125): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993306.443:6126): pid=34929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993306.444:6127): pid=34929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64627A727374786A6B6170727363686F6373796B6E67706D776D676A6C7A7275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993306.444:6128): pid=34929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993306.446:6129): pid=34929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993306.630:6130): pid=34929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993306.630:6131): pid=34929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993306.634:6132): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993306.635:6133): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993307.498:6134): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993307.498:6135): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993307.544:6136): pid=34946 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993307.544:6137): pid=34946 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6B7576616B636F6E707A7966686F7070777075796165717973647771797274203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993307.545:6138): pid=34946 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993307.548:6139): pid=34946 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993310.083:6140): pid=34887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=34890 suid=74 rport=33274 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993310.084:6141): pid=34887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34890 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993310.084:6142): pid=34887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993310.085:6143): pid=34887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993310.085:6144): pid=34887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993311.630:6145): pid=34988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34988 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993311.632:6146): pid=34987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34988 suid=74 rport=45360 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993311.632:6147): pid=34987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=34988 suid=74 rport=45360 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993315.029:6148): pid=34946 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993315.029:6149): pid=34946 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993315.033:6150): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993315.033:6151): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993315.196:6152): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993315.197:6153): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993315.257:6154): pid=35014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993315.257:6155): pid=35014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A6A6D626B707762776D61686E6B66776C7470616470667866717A6264726B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993315.258:6156): pid=35014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993315.261:6157): pid=35014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993315.492:6158): pid=35014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993315.492:6159): pid=35014 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993315.496:6160): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993315.497:6161): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993315.636:6162): pid=34987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=34988 suid=74 rport=45360 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993315.636:6163): pid=34987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34988 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993315.637:6164): pid=34987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993315.638:6165): pid=34987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=34987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993315.638:6166): pid=34987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993315.977:6167): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993315.977:6168): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993316.041:6169): pid=35042 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993316.041:6170): pid=35042 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B676F68786C72796564786C6973696264686A646F697974696F76706F75766B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993316.042:6171): pid=35042 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993316.044:6172): pid=35042 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993316.445:6173): pid=35058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993316.447:6174): pid=35028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35058 suid=74 rport=45376 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993316.447:6175): pid=35028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35058 suid=74 rport=45376 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993318.862:6176): pid=35028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=35058 suid=74 rport=45376 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993318.863:6177): pid=35028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35058 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993318.864:6178): pid=35028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993318.864:6179): pid=35028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993318.864:6180): pid=35028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993319.330:6181): pid=35085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993319.331:6182): pid=35084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35085 suid=74 rport=45380 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993319.332:6183): pid=35084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35085 suid=74 rport=45380 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993321.367:6184): pid=35084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=35085 suid=74 rport=45380 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993321.367:6185): pid=35084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35085 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993321.368:6186): pid=35084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993321.369:6187): pid=35084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35084 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993321.369:6188): pid=35084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993322.050:6189): pid=35100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993322.052:6190): pid=35099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35100 suid=74 rport=37502 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993322.052:6191): pid=35099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35100 suid=74 rport=37502 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993322.691:6192): pid=35042 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993322.691:6193): pid=35042 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993322.695:6194): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993322.695:6195): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993322.830:6196): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993322.830:6197): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993322.889:6198): pid=35114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993322.889:6199): pid=35114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627168676C766369696162697872797463626770767578686568616274646965203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993322.890:6200): pid=35114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993322.893:6201): pid=35114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993323.100:6202): pid=35114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993323.101:6203): pid=35114 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993323.105:6204): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993323.105:6205): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993323.273:6206): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993323.273:6207): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993323.325:6208): pid=35142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993323.325:6209): pid=35142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696461686A6F64717979776B75667668757A6C6A73746D6D786E767763647676203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993323.325:6210): pid=35142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993323.327:6211): pid=35142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993324.989:6212): pid=35099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=35100 suid=74 rport=37502 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993324.989:6213): pid=35099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35100 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993324.990:6214): pid=35099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993324.990:6215): pid=35099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993324.991:6216): pid=35099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993325.981:6217): pid=35171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993325.982:6218): pid=35170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35171 suid=74 rport=37504 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993325.982:6219): pid=35170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35171 suid=74 rport=37504 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993327.161:6220): pid=35142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993327.162:6221): pid=35142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993327.166:6222): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993327.166:6223): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993327.253:6224): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993327.253:6225): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993327.301:6226): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993327.301:6227): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7278726A626C697076746A6E677374727866717363757977756D63786C7365203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993327.301:6228): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993327.304:6229): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993329.550:6230): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993329.550:6231): pid=35233 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993329.554:6232): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993329.554:6233): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993329.625:6234): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993329.625:6235): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993329.686:6236): pid=35312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993329.686:6237): pid=35312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D78666B6D637579786A6178656C64736E706F646D6B757A717075676B64766A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993329.687:6238): pid=35312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993329.690:6239): pid=35312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993330.138:6240): pid=35170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=35171 suid=74 rport=37504 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993330.138:6241): pid=35170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35171 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993330.139:6242): pid=35170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993330.139:6243): pid=35170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993330.139:6244): pid=35170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993331.297:6245): pid=35342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993331.298:6246): pid=35341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35342 suid=74 rport=44750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993331.298:6247): pid=35341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35342 suid=74 rport=44750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993331.948:6248): pid=35312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993331.949:6249): pid=35312 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993331.952:6250): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993331.952:6251): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993332.034:6252): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993332.034:6253): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993332.093:6254): pid=35394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993332.093:6255): pid=35394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636E716D64656E6B6562757178707165656C7174766C6B6C6E6A7A6A68696970203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993332.095:6256): pid=35394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993332.097:6257): pid=35394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993336.087:6258): pid=35341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=35342 suid=74 rport=44750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993336.087:6259): pid=35341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35342 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993336.088:6260): pid=35341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993336.088:6261): pid=35341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993336.088:6262): pid=35341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993338.153:6263): pid=35715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35715 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993338.154:6264): pid=35460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35715 suid=74 rport=44756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993338.154:6265): pid=35460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35715 suid=74 rport=44756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993342.625:6266): pid=35394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993342.625:6267): pid=35394 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993342.629:6268): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993342.629:6269): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993342.705:6270): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993342.705:6271): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993342.758:6272): pid=35767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993342.758:6273): pid=35767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D71727A666B7469736278686E6A756967776E6575736A7277776470786C7769203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993342.759:6274): pid=35767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993342.760:6275): pid=35767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993344.457:6276): pid=35460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=35715 suid=74 rport=44756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993344.457:6277): pid=35460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35715 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993344.458:6278): pid=35460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993344.458:6279): pid=35460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35460 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993344.458:6280): pid=35460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993345.995:6281): pid=35822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993345.996:6282): pid=35821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35822 suid=74 rport=46110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993345.996:6283): pid=35821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=35822 suid=74 rport=46110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993348.958:6284): pid=35767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993348.958:6285): pid=35767 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993348.962:6286): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993348.962:6287): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993349.012:6288): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993349.012:6289): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993349.067:6290): pid=35976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993349.068:6291): pid=35976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A746E6D717A746A71676B7866616B6862666761786A766D6961736E70657A63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993349.068:6292): pid=35976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993349.071:6293): pid=35976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993349.471:6294): pid=35821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=35822 suid=74 rport=46110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993349.471:6295): pid=35821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35822 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993349.472:6296): pid=35821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993349.473:6297): pid=35821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=35821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993349.473:6298): pid=35821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993350.636:6299): pid=36004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993350.638:6300): pid=36003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=36004 suid=74 rport=57204 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993350.638:6301): pid=36003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=36004 suid=74 rport=57204 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993354.206:6302): pid=36003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=36004 suid=74 rport=57204 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993354.206:6303): pid=36003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36004 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993354.207:6304): pid=36003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993354.207:6305): pid=36003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993354.207:6306): pid=36003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993354.829:6307): pid=35976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993354.829:6308): pid=35976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993354.832:6309): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993354.832:6310): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993354.920:6311): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993354.920:6312): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993354.979:6313): pid=36070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993354.980:6314): pid=36070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D677276786869786162696F696E616C74697276736274797371786E74766167203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993354.980:6315): pid=36070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993354.983:6316): pid=36070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993355.163:6317): pid=36079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993355.164:6318): pid=36043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=36079 suid=74 rport=57218 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993355.164:6319): pid=36043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=36079 suid=74 rport=57218 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993358.104:6320): pid=36070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993358.104:6321): pid=36070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993358.108:6322): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993358.108:6323): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993358.183:6324): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993358.183:6325): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993358.239:6326): pid=36163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993358.239:6327): pid=36163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6868757A6F6F736F6E67717A7A6A7A636F776B79686D6B7569616B73727A6F70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993358.240:6328): pid=36163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993358.242:6329): pid=36163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993358.439:6330): pid=36043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=36079 suid=74 rport=57218 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993358.440:6331): pid=36043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36079 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993358.440:6332): pid=36043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993358.440:6333): pid=36043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993358.440:6334): pid=36043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993358.825:6335): pid=36190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993358.827:6336): pid=36187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=36190 suid=74 rport=57234 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993358.827:6337): pid=36187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=36190 suid=74 rport=57234 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993362.350:6338): pid=36163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993362.350:6339): pid=36163 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993362.354:6340): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993362.354:6341): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993362.900:6342): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993362.901:6343): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993362.934:6344): pid=36251 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993362.934:6345): pid=36251 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63686A636671667367677175736A6E6F68666A636E62666E6B79766574757271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993362.934:6346): pid=36251 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993362.936:6347): pid=36251 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993365.077:6348): pid=36187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=36190 suid=74 rport=57234 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993365.077:6349): pid=36187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36190 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993365.077:6350): pid=36187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993365.078:6351): pid=36187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36187 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993365.078:6352): pid=36187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993365.878:6353): pid=36304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993365.879:6354): pid=36303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=36304 suid=74 rport=38038 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993365.879:6355): pid=36303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=36304 suid=74 rport=38038 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993366.509:6356): pid=36251 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993366.509:6357): pid=36251 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993366.512:6358): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993366.512:6359): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993366.557:6360): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993366.557:6361): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993366.619:6362): pid=36342 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993366.619:6363): pid=36342 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66696F657274786A666E62706C66626C746969706B64766E64766A63766E7378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993366.620:6364): pid=36342 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993366.623:6365): pid=36342 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993369.390:6366): pid=36303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=36304 suid=74 rport=38038 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993369.390:6367): pid=36303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36304 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993369.391:6368): pid=36303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993369.392:6369): pid=36303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36303 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993369.392:6370): pid=36303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993370.516:6371): pid=36418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993370.518:6372): pid=36405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=36418 suid=74 rport=56684 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993370.518:6373): pid=36405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=36418 suid=74 rport=56684 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993370.871:6374): pid=36342 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993370.872:6375): pid=36342 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993370.876:6376): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993370.876:6377): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993371.130:6378): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993371.131:6379): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993371.180:6380): pid=36445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993371.181:6381): pid=36445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78696C666C61646D656163756368787A6D6970767A68626C736C62616C627667203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993371.181:6382): pid=36445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993371.184:6383): pid=36445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993371.376:6384): pid=36445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993371.376:6385): pid=36445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993371.379:6386): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993371.379:6387): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993371.569:6388): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993371.570:6389): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993371.595:6390): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993371.595:6391): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993371.616:6392): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993371.616:6393): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993371.647:6394): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993371.647:6395): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993371.669:6396): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993371.670:6397): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993371.729:6398): pid=36495 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993371.729:6399): pid=36495 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616A796A7868787774786B6E77736576697571726776756C6C797562766D6373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993371.730:6400): pid=36495 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993371.732:6401): pid=36495 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993371.912:6402): pid=36495 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993371.913:6403): pid=36495 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993371.917:6404): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993371.917:6405): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993371.934:6406): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993371.934:6407): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993371.982:6408): pid=36513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993371.982:6409): pid=36513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A73657474777469736A736C6A707970646376706162716378756269687667203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993371.983:6410): pid=36513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993371.985:6411): pid=36513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993372.170:6412): pid=36513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993372.170:6413): pid=36513 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993372.175:6414): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993372.175:6415): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993372.193:6416): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993372.193:6417): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993372.225:6418): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993372.225:6419): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993372.329:6420): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993372.329:6421): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993372.362:6422): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993372.362:6423): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993372.379:6424): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993372.379:6425): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993372.420:6426): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993372.420:6427): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993372.449:6428): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993372.449:6429): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993372.484:6430): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993372.484:6431): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993372.641:6432): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993372.641:6433): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993372.676:6434): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993372.676:6435): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993372.697:6436): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993372.697:6437): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993372.731:6438): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993372.731:6439): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993372.755:6440): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993372.755:6441): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993372.813:6442): pid=36617 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993372.813:6443): pid=36617 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993372.814:6444): pid=36617 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993372.816:6445): pid=36617 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993373.010:6446): pid=36617 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993373.011:6447): pid=36617 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993373.014:6448): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993373.014:6449): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993373.255:6450): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993373.255:6451): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993373.312:6452): pid=36641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993373.312:6453): pid=36641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D63646266667575637A6571756D67616968626B797A7171746C65636E72676E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993373.313:6454): pid=36641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993373.316:6455): pid=36641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993373.479:6456): pid=36641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993373.480:6457): pid=36641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993373.485:6458): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993373.485:6459): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993375.393:6460): pid=36405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=36418 suid=74 rport=56684 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993375.394:6461): pid=36405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36418 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993375.395:6462): pid=36405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993375.395:6463): pid=36405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=36405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993375.395:6464): pid=36405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993376.415:6465): pid=37423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=37423 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993377.694:6466): pid=37422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=37423 suid=74 rport=56698 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993377.694:6467): pid=37422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=37423 suid=74 rport=56698 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993380.687:6468): pid=37422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=37423 suid=74 rport=56698 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993380.688:6469): pid=37422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=37423 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993380.688:6470): pid=37422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993380.689:6471): pid=37422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=37422 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993380.689:6472): pid=37422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993381.676:6473): pid=37437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=37437 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993381.678:6474): pid=37436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=37437 suid=74 rport=48712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993381.678:6475): pid=37436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=37437 suid=74 rport=48712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993383.548:6476): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993383.548:6477): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993383.617:6478): pid=37529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993383.617:6479): pid=37529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7962786970727661756C6C67707266776173727070737169676B6D7A636D75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993383.618:6480): pid=37529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993383.622:6481): pid=37529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993383.792:6482): pid=37529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993383.792:6483): pid=37529 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993383.795:6484): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993383.795:6485): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993384.648:6486): pid=37436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=37437 suid=74 rport=48712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993384.649:6487): pid=37436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=37437 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993384.651:6488): pid=37436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993384.651:6489): pid=37436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=37436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993384.651:6490): pid=37436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993385.542:6491): pid=37539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=37539 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993385.543:6492): pid=37536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=37539 suid=74 rport=48722 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993385.543:6493): pid=37536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=37539 suid=74 rport=48722 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=ADD_GROUP msg=audit(1780993385.620:6494): pid=37542 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=189 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="haclient"
type=GRP_MGMT msg=audit(1780993385.626:6495): pid=37542 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=189 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="haclient"
type=ADD_USER msg=audit(1780993385.689:6496): pid=37549 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="hacluster" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993386.777:6497): pid=33494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=33494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1780993386.780:6498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993386.807:6499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993387.061:6500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r35ebfcd530fa4787aa9bb0030b4b43bc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993387.344:6501): prog-id=162 op=LOAD
type=BPF msg=audit(1780993387.344:6502): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993387.346:6503): prog-id=163 op=LOAD
type=BPF msg=audit(1780993387.346:6504): prog-id=164 op=LOAD
type=BPF msg=audit(1780993387.346:6505): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993387.346:6506): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993387.348:6507): prog-id=165 op=LOAD
type=BPF msg=audit(1780993387.348:6508): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993387.350:6509): prog-id=166 op=LOAD
type=BPF msg=audit(1780993387.350:6510): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993387.350:6511): prog-id=167 op=LOAD
type=BPF msg=audit(1780993387.350:6512): prog-id=168 op=LOAD
type=BPF msg=audit(1780993387.350:6513): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993387.350:6514): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993387.350:6515): prog-id=169 op=LOAD
type=BPF msg=audit(1780993387.350:6516): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993387.350:6517): prog-id=170 op=LOAD
type=BPF msg=audit(1780993387.351:6518): prog-id=171 op=LOAD
type=BPF msg=audit(1780993387.351:6519): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993387.351:6520): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1780993387.405:6521): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nspr-4.35.0-17.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.405:6522): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libqb-2.0.6-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6523): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-util-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6524): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="corosynclib-3.1.7-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6525): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-1.19-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6526): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-MD5-2.58-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6527): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-B-0:1.80-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6528): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-FileHandle-0:2.03-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6529): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Data-Dumper-2.174-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6530): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libnet-3.13-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6531): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-AutoLoader-0:5.74-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6532): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-base-0:2.27-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6533): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-URI-5.09-3.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6534): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Time-Local-2:1.300-7.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6535): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Mozilla-CA-20200520-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6536): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-if-0:0.60.800-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6537): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-IP-0.41-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6538): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-Tabs+Wrap-2013.0523-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6539): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Net-SSLeay-1.92-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6540): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Escapes-1:1.07-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6541): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Path-2.18-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6542): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-SSL-2.073-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6543): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-ANSIColor-5.01-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6544): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Class-Struct-0:0.66-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6545): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-POSIX-0:1.94-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6546): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IPC-Open3-0:1.21-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6547): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-subs-0:1.03-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6548): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-Cap-1.17-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6549): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Simple-1:3.42-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6550): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Temp-1:0.231.100-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6551): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-HTTP-Tiny-0.076-461.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6552): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Socket-4:2.031-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6553): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-SelectSaver-0:1.02-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.406:6554): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Symbol-0:1.08-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6555): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-stat-0:1.09-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6556): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-podlators-1:4.14-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6557): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Perldoc-3.28.01-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6558): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-ParseWords-3.30-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6559): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Fcntl-0:1.13-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6560): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overloading-0:0.02-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6561): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-0:1.43-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6562): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-mro-0:1.23-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6563): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Usage-4:2.01-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6564): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-parent-1:0.238-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6565): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-MIME-Base64-3.16-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6566): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Scalar-List-Utils-4:1.56-461.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6567): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-constant-1.33-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6568): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Errno-0:1.30-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6569): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Basename-0:2.85-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6570): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Std-0:1.12-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6571): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Storable-1:3.21-460.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6572): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overload-0:1.31-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6573): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-vars-0:1.05-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6574): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Long-1:2.52-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6575): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Exporter-5.74-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6576): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Carp-1.50-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6577): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-PathTools-3.78-461.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6578): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-NDBM_File-0:1.15-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6579): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Encode-4:3.08-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6580): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libs-4:5.32.1-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6581): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-interpreter-4:5.32.1-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6582): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6583): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-TimeDate-1:2.33-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6584): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-softokn-freebl-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6585): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-softokn-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6586): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6587): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-sysinit-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.407:6588): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-crypto-nss-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6589): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-m4-1.7.3-10.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6590): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libpkgconf-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6591): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6592): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pkgconf-pkg-config-1.7.3-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6593): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-schemas-2.1.5-9.el9_2.4.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6594): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-libs-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6595): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-cluster-libs-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6596): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-tools-2.0-0.62.20160912git.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6597): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="resource-agents-4.10.0-34.el9_2.9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6598): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-libs-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6599): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnozzle1-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6600): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="corosync-3.1.7-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6601): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-cli-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993387.408:6602): pid=37432 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pacemaker-2.1.5-9.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993388.106:6603): pid=37536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=37539 suid=74 rport=48722 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993388.107:6604): pid=37536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=37539 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993388.108:6605): pid=37536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993388.109:6606): pid=37536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=37536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993388.109:6607): pid=37536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993388.734:6608): pid=39315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39315 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993388.736:6609): pid=38826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=39315 suid=74 rport=48736 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993388.736:6610): pid=38826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=39315 suid=74 rport=48736 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993388.830:6611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993388.830:6612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993388.831:6613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r35ebfcd530fa4787aa9bb0030b4b43bc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993390.737:6614): pid=38826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=39315 suid=74 rport=48736 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993390.737:6615): pid=38826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39315 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993390.737:6616): pid=38826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993390.738:6617): pid=38826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=38826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993390.738:6618): pid=38826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993391.203:6619): pid=39370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993391.205:6620): pid=39369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=39370 suid=74 rport=43540 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993391.206:6621): pid=39369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=39370 suid=74 rport=43540 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993392.041:6622): pid=39372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993392.320:6623): pid=39371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=39372 suid=74 rport=52460 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993392.321:6624): pid=39371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=39372 suid=74 rport=52460 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993392.904:6625): pid=39369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=39370 suid=74 rport=43540 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993392.905:6626): pid=39369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39370 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993392.905:6627): pid=39369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993392.906:6628): pid=39369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993392.906:6629): pid=39369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993393.514:6630): pid=39390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39390 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993393.516:6631): pid=39389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=39390 suid=74 rport=43552 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993393.516:6632): pid=39389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=39390 suid=74 rport=43552 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993393.816:6633): pid=39371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=39372 suid=74 rport=52460 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993393.817:6634): pid=39371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39372 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993393.818:6635): pid=39371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993393.819:6636): pid=39371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993393.819:6637): pid=39371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993393.848:6638): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993393.848:6639): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993393.908:6640): pid=39404 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993393.908:6641): pid=39404 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F65746F686D656B6F70726C676B776571676166686E6F7A6A76696E776C7070203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993393.909:6642): pid=39404 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993393.914:6643): pid=39404 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993394.076:6644): pid=39404 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993394.077:6645): pid=39404 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993394.080:6646): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993394.080:6647): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1780993395.268:6648): prog-id=172 op=LOAD
type=BPF msg=audit(1780993395.268:6649): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.270:6650): prog-id=173 op=LOAD
type=BPF msg=audit(1780993395.270:6651): prog-id=174 op=LOAD
type=BPF msg=audit(1780993395.270:6652): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.270:6653): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.272:6654): prog-id=175 op=LOAD
type=BPF msg=audit(1780993395.272:6655): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.274:6656): prog-id=176 op=LOAD
type=BPF msg=audit(1780993395.274:6657): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.274:6658): prog-id=177 op=LOAD
type=BPF msg=audit(1780993395.274:6659): prog-id=178 op=LOAD
type=BPF msg=audit(1780993395.274:6660): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.274:6661): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.274:6662): prog-id=179 op=LOAD
type=BPF msg=audit(1780993395.274:6663): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.274:6664): prog-id=180 op=LOAD
type=BPF msg=audit(1780993395.274:6665): prog-id=181 op=LOAD
type=BPF msg=audit(1780993395.274:6666): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.274:6667): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993395.427:6668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r7d6b634bde5542fabfbcb12b22c75810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993395.713:6669): prog-id=182 op=LOAD
type=BPF msg=audit(1780993395.713:6670): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.714:6671): prog-id=183 op=LOAD
type=BPF msg=audit(1780993395.714:6672): prog-id=184 op=LOAD
type=BPF msg=audit(1780993395.714:6673): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.714:6674): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.717:6675): prog-id=185 op=LOAD
type=BPF msg=audit(1780993395.717:6676): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.719:6677): prog-id=186 op=LOAD
type=BPF msg=audit(1780993395.719:6678): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.719:6679): prog-id=187 op=LOAD
type=BPF msg=audit(1780993395.719:6680): prog-id=188 op=LOAD
type=BPF msg=audit(1780993395.719:6681): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.719:6682): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.719:6683): prog-id=189 op=LOAD
type=BPF msg=audit(1780993395.719:6684): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.719:6685): prog-id=190 op=LOAD
type=BPF msg=audit(1780993395.719:6686): prog-id=191 op=LOAD
type=BPF msg=audit(1780993395.719:6687): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993395.719:6688): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993395.733:6689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993395.733:6690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993395.735:6691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r7d6b634bde5542fabfbcb12b22c75810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1780993395.747:6692): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-tornado-6.4.2-1.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.747:6693): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pycurl-7.43.0.6-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.747:6694): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-crypto-openssl-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.747:6695): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-crypto-plugins-all-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.747:6696): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-zstd-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.747:6697): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-zlib-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.747:6698): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-lzo2-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.747:6699): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-lzma-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.748:6700): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-lz4-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.748:6701): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-bzip2-plugin-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.748:6702): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-compress-plugins-all-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.748:6703): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libknet1-plugins-all-1.25-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993395.748:6704): pid=39368 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcs-0.11.4-7.el9_2.5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993396.556:6705): pid=39389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=39390 suid=74 rport=43552 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993396.557:6706): pid=39389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39390 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993396.558:6707): pid=39389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993396.559:6708): pid=39389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993396.559:6709): pid=39389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1780993397.082:6710): pid=39583 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="haclient" acct="hacluster" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MGMT msg=audit(1780993397.083:6711): pid=39583 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="haclient" acct="hacluster" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1780993397.424:6712): prog-id=192 op=LOAD
type=BPF msg=audit(1780993397.424:6713): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993397.426:6714): prog-id=193 op=LOAD
type=BPF msg=audit(1780993397.426:6715): prog-id=194 op=LOAD
type=BPF msg=audit(1780993397.426:6716): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993397.426:6717): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993397.429:6718): prog-id=195 op=LOAD
type=BPF msg=audit(1780993397.429:6719): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993397.431:6720): prog-id=196 op=LOAD
type=BPF msg=audit(1780993397.431:6721): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993397.431:6722): prog-id=197 op=LOAD
type=BPF msg=audit(1780993397.431:6723): prog-id=198 op=LOAD
type=BPF msg=audit(1780993397.431:6724): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993397.431:6725): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993397.432:6726): prog-id=199 op=LOAD
type=BPF msg=audit(1780993397.432:6727): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993397.432:6728): prog-id=200 op=LOAD
type=BPF msg=audit(1780993397.432:6729): prog-id=201 op=LOAD
type=BPF msg=audit(1780993397.432:6730): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993397.432:6731): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993397.921:6732): pid=39632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993397.923:6733): pid=39575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=39632 suid=74 rport=43554 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993397.923:6734): pid=39575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=39632 suid=74 rport=43554 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993398.054:6735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=pcsd-ruby comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993399.337:6736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=pcsd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993399.581:6737): prog-id=202 op=LOAD
type=BPF msg=audit(1780993399.581:6738): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.582:6739): prog-id=203 op=LOAD
type=BPF msg=audit(1780993399.582:6740): prog-id=204 op=LOAD
type=BPF msg=audit(1780993399.582:6741): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.582:6742): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.585:6743): prog-id=205 op=LOAD
type=BPF msg=audit(1780993399.585:6744): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.587:6745): prog-id=206 op=LOAD
type=BPF msg=audit(1780993399.587:6746): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.587:6747): prog-id=207 op=LOAD
type=BPF msg=audit(1780993399.587:6748): prog-id=208 op=LOAD
type=BPF msg=audit(1780993399.587:6749): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.587:6750): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.587:6751): prog-id=209 op=LOAD
type=BPF msg=audit(1780993399.587:6752): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.588:6753): prog-id=210 op=LOAD
type=BPF msg=audit(1780993399.588:6754): prog-id=211 op=LOAD
type=BPF msg=audit(1780993399.588:6755): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.588:6756): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.784:6757): prog-id=212 op=LOAD
type=BPF msg=audit(1780993399.784:6758): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.786:6759): prog-id=213 op=LOAD
type=BPF msg=audit(1780993399.786:6760): prog-id=214 op=LOAD
type=BPF msg=audit(1780993399.786:6761): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.786:6762): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.788:6763): prog-id=215 op=LOAD
type=BPF msg=audit(1780993399.788:6764): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.790:6765): prog-id=216 op=LOAD
type=BPF msg=audit(1780993399.790:6766): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.790:6767): prog-id=217 op=LOAD
type=BPF msg=audit(1780993399.790:6768): prog-id=218 op=LOAD
type=BPF msg=audit(1780993399.790:6769): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.790:6770): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.790:6771): prog-id=219 op=LOAD
type=BPF msg=audit(1780993399.790:6772): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.790:6773): prog-id=220 op=LOAD
type=BPF msg=audit(1780993399.790:6774): prog-id=221 op=LOAD
type=BPF msg=audit(1780993399.790:6775): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993399.790:6776): prog-id=0 op=UNLOAD
type=USER_AUTH msg=audit(1780993401.308:6777): pid=39633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:authentication grantors=pam_unix acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993401.333:6778): pid=39633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cluster_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="hacluster" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993402.037:6779): pid=39575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=39632 suid=74 rport=43554 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993402.038:6780): pid=39575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39632 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993402.039:6781): pid=39575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993402.039:6782): pid=39575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39575 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993402.039:6783): pid=39575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993403.511:6784): pid=39849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39849 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993403.512:6785): pid=39826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=39849 suid=74 rport=37086 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993403.512:6786): pid=39826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=39849 suid=74 rport=37086 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1780993404.125:6787): prog-id=222 op=LOAD
type=BPF msg=audit(1780993404.125:6788): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.127:6789): prog-id=223 op=LOAD
type=BPF msg=audit(1780993404.127:6790): prog-id=224 op=LOAD
type=BPF msg=audit(1780993404.127:6791): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.127:6792): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.129:6793): prog-id=225 op=LOAD
type=BPF msg=audit(1780993404.129:6794): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.131:6795): prog-id=226 op=LOAD
type=BPF msg=audit(1780993404.131:6796): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.131:6797): prog-id=227 op=LOAD
type=BPF msg=audit(1780993404.131:6798): prog-id=228 op=LOAD
type=BPF msg=audit(1780993404.131:6799): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.131:6800): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.132:6801): prog-id=229 op=LOAD
type=BPF msg=audit(1780993404.132:6802): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.132:6803): prog-id=230 op=LOAD
type=BPF msg=audit(1780993404.132:6804): prog-id=231 op=LOAD
type=BPF msg=audit(1780993404.132:6805): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.132:6806): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1780993404.140:6807): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993404.140:6808): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993404.209:6809): pid=39901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993404.210:6810): pid=39901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7965636969656977707268746366757765646167746D757A616E616F6D6C696E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993404.211:6811): pid=39901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993404.434:6812): prog-id=232 op=LOAD
type=BPF msg=audit(1780993404.434:6813): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.436:6814): prog-id=233 op=LOAD
type=BPF msg=audit(1780993404.436:6815): prog-id=234 op=LOAD
type=BPF msg=audit(1780993404.436:6816): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.436:6817): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.438:6818): prog-id=235 op=LOAD
type=BPF msg=audit(1780993404.438:6819): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.440:6820): prog-id=236 op=LOAD
type=BPF msg=audit(1780993404.440:6821): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.440:6822): prog-id=237 op=LOAD
type=BPF msg=audit(1780993404.440:6823): prog-id=238 op=LOAD
type=BPF msg=audit(1780993404.440:6824): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.440:6825): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.441:6826): prog-id=239 op=LOAD
type=BPF msg=audit(1780993404.441:6827): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.441:6828): prog-id=240 op=LOAD
type=BPF msg=audit(1780993404.441:6829): prog-id=241 op=LOAD
type=BPF msg=audit(1780993404.441:6830): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993404.441:6831): prog-id=0 op=UNLOAD
type=USER_START msg=audit(1780993404.450:6832): pid=39901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993404.620:6833): pid=39901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993404.620:6834): pid=39901 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993404.625:6835): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993404.625:6836): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1780993406.610:6837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=corosync comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993406.631:6838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=pacemaker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993407.049:6839): prog-id=242 op=LOAD
type=BPF msg=audit(1780993407.049:6840): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.050:6841): prog-id=243 op=LOAD
type=BPF msg=audit(1780993407.050:6842): prog-id=244 op=LOAD
type=BPF msg=audit(1780993407.050:6843): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.050:6844): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.053:6845): prog-id=245 op=LOAD
type=BPF msg=audit(1780993407.053:6846): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.055:6847): prog-id=246 op=LOAD
type=BPF msg=audit(1780993407.055:6848): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.055:6849): prog-id=247 op=LOAD
type=BPF msg=audit(1780993407.055:6850): prog-id=248 op=LOAD
type=BPF msg=audit(1780993407.055:6851): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.055:6852): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.055:6853): prog-id=249 op=LOAD
type=BPF msg=audit(1780993407.055:6854): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.055:6855): prog-id=250 op=LOAD
type=BPF msg=audit(1780993407.055:6856): prog-id=251 op=LOAD
type=BPF msg=audit(1780993407.055:6857): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.055:6858): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.263:6859): prog-id=252 op=LOAD
type=BPF msg=audit(1780993407.263:6860): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.265:6861): prog-id=253 op=LOAD
type=BPF msg=audit(1780993407.265:6862): prog-id=254 op=LOAD
type=BPF msg=audit(1780993407.265:6863): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.265:6864): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.267:6865): prog-id=255 op=LOAD
type=BPF msg=audit(1780993407.267:6866): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.269:6867): prog-id=256 op=LOAD
type=BPF msg=audit(1780993407.269:6868): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.269:6869): prog-id=257 op=LOAD
type=BPF msg=audit(1780993407.269:6870): prog-id=258 op=LOAD
type=BPF msg=audit(1780993407.269:6871): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.269:6872): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.270:6873): prog-id=259 op=LOAD
type=BPF msg=audit(1780993407.270:6874): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.270:6875): prog-id=260 op=LOAD
type=BPF msg=audit(1780993407.270:6876): prog-id=261 op=LOAD
type=BPF msg=audit(1780993407.270:6877): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.270:6878): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.508:6879): prog-id=262 op=LOAD
type=BPF msg=audit(1780993407.508:6880): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.510:6881): prog-id=263 op=LOAD
type=BPF msg=audit(1780993407.510:6882): prog-id=264 op=LOAD
type=BPF msg=audit(1780993407.510:6883): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.510:6884): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.514:6885): prog-id=265 op=LOAD
type=BPF msg=audit(1780993407.514:6886): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.517:6887): prog-id=266 op=LOAD
type=BPF msg=audit(1780993407.517:6888): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.517:6889): prog-id=267 op=LOAD
type=BPF msg=audit(1780993407.517:6890): prog-id=268 op=LOAD
type=BPF msg=audit(1780993407.517:6891): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.517:6892): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.517:6893): prog-id=269 op=LOAD
type=BPF msg=audit(1780993407.518:6894): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.518:6895): prog-id=270 op=LOAD
type=BPF msg=audit(1780993407.518:6896): prog-id=271 op=LOAD
type=BPF msg=audit(1780993407.518:6897): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.518:6898): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.735:6899): prog-id=272 op=LOAD
type=BPF msg=audit(1780993407.735:6900): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.738:6901): prog-id=273 op=LOAD
type=BPF msg=audit(1780993407.738:6902): prog-id=274 op=LOAD
type=BPF msg=audit(1780993407.738:6903): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.738:6904): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.740:6905): prog-id=275 op=LOAD
type=BPF msg=audit(1780993407.740:6906): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.743:6907): prog-id=276 op=LOAD
type=BPF msg=audit(1780993407.743:6908): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.743:6909): prog-id=277 op=LOAD
type=BPF msg=audit(1780993407.743:6910): prog-id=278 op=LOAD
type=BPF msg=audit(1780993407.743:6911): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.743:6912): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.743:6913): prog-id=279 op=LOAD
type=BPF msg=audit(1780993407.743:6914): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.743:6915): prog-id=280 op=LOAD
type=BPF msg=audit(1780993407.743:6916): prog-id=281 op=LOAD
type=BPF msg=audit(1780993407.743:6917): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993407.743:6918): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993408.395:6919): pid=39826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=39849 suid=74 rport=37086 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993408.396:6920): pid=39826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39849 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993408.397:6921): pid=39826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993408.397:6922): pid=39826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=39826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993408.397:6923): pid=39826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993409.488:6924): pid=40159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993409.489:6925): pid=40145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40159 suid=74 rport=37090 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993409.489:6926): pid=40145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40159 suid=74 rport=37090 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993414.685:6927): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993414.685:6928): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993414.729:6929): pid=40173 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993414.729:6930): pid=40173 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B746E6E626E6474686F78766D72716E7676786761646F6F646962766A686B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993414.730:6931): pid=40173 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993414.733:6932): pid=40173 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993414.886:6933): pid=40173 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993414.886:6934): pid=40173 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993414.891:6935): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993414.891:6936): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993415.106:6937): pid=40145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=40159 suid=74 rport=37090 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993415.106:6938): pid=40145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40159 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993415.107:6939): pid=40145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993415.107:6940): pid=40145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993415.108:6941): pid=40145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993415.698:6942): pid=40177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993415.699:6943): pid=40176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40177 suid=74 rport=34680 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993415.699:6944): pid=40176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40177 suid=74 rport=34680 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993418.377:6945): pid=40176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=40177 suid=74 rport=34680 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993418.378:6946): pid=40176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40177 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993418.378:6947): pid=40176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993418.379:6948): pid=40176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993418.379:6949): pid=40176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993419.476:6950): pid=40183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993419.478:6951): pid=40178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40183 suid=74 rport=34692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993419.478:6952): pid=40178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40183 suid=74 rport=34692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993419.842:6953): pid=40198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993420.050:6954): pid=40197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=40198 suid=74 rport=36068 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993420.050:6955): pid=40197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=40198 suid=74 rport=36068 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993421.195:6956): pid=40197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=40198 suid=74 rport=36068 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993421.195:6957): pid=40197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40198 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993421.195:6958): pid=40197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993421.196:6959): pid=40197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40197 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993421.196:6960): pid=40197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993424.962:6961): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993424.962:6962): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993425.020:6963): pid=40212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993425.020:6964): pid=40212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E676E776F64736D736B74686A7177626E646D6B6A707873716A786663617667203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993425.020:6965): pid=40212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993425.023:6966): pid=40212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993425.192:6967): pid=40212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993425.192:6968): pid=40212 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993425.197:6969): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993425.197:6970): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993425.326:6971): pid=40178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=40183 suid=74 rport=34692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993425.327:6972): pid=40178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40183 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993425.327:6973): pid=40178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993425.328:6974): pid=40178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993425.328:6975): pid=40178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993425.903:6976): pid=40216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40216 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993425.905:6977): pid=40215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40216 suid=74 rport=60224 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993425.905:6978): pid=40215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40216 suid=74 rport=60224 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993427.719:6979): pid=40215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=40216 suid=74 rport=60224 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993427.719:6980): pid=40215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40216 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993427.720:6981): pid=40215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993427.721:6982): pid=40215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993427.721:6983): pid=40215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993428.473:6984): pid=40218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40218 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993428.475:6985): pid=40217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40218 suid=74 rport=60234 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993428.475:6986): pid=40217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40218 suid=74 rport=60234 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993432.347:6987): pid=40217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=40218 suid=74 rport=60234 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993432.347:6988): pid=40217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40218 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993432.348:6989): pid=40217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993432.349:6990): pid=40217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993432.349:6991): pid=40217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993433.606:6992): pid=40261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40261 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993434.745:6993): pid=40251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40261 suid=74 rport=37820 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993434.745:6994): pid=40251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40261 suid=74 rport=37820 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993435.263:6995): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993435.263:6996): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993435.325:6997): pid=40278 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993435.325:6998): pid=40278 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6876677175726C66726870746A6F6B77726578787A6F6D657A6B7974686C6F7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993435.326:6999): pid=40278 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993435.329:7000): pid=40278 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993435.490:7001): pid=40278 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993435.490:7002): pid=40278 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993435.494:7003): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993435.494:7004): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993435.948:7005): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993435.948:7006): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993436.006:7007): pid=40294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993436.007:7008): pid=40294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6877646E6361666E73746A71776F77697667787675736D716A61646A786E6B75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993436.007:7009): pid=40294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993436.010:7010): pid=40294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993436.151:7011): pid=40294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993436.152:7012): pid=40294 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993436.156:7013): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993436.156:7014): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993436.248:7015): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993436.248:7016): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993436.310:7017): pid=40310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993436.310:7018): pid=40310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D6D71736A6B62647A7277737167716C68766C6363737A6464716669677A6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993436.310:7019): pid=40310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993436.313:7020): pid=40310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993436.483:7021): pid=40310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993436.484:7022): pid=40310 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993436.486:7023): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993436.487:7024): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993436.637:7025): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993436.637:7026): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993436.664:7027): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993436.664:7028): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993436.686:7029): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993436.686:7030): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993436.720:7031): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993436.720:7032): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993436.747:7033): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993436.748:7034): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993436.803:7035): pid=40358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993436.803:7036): pid=40358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6A7A6473626B6678776E646C6B7463766879676A6F6968716C6F6F6D66636B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993436.804:7037): pid=40358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993436.806:7038): pid=40358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993437.009:7039): pid=40358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993437.010:7040): pid=40358 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993437.013:7041): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993437.014:7042): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993437.040:7043): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993437.041:7044): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993437.076:7045): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993437.076:7046): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993437.099:7047): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993437.099:7048): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993437.131:7049): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993437.131:7050): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993437.154:7051): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993437.154:7052): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993437.203:7053): pid=40401 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993437.203:7054): pid=40401 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6670666B677A6F6D6C6B74717063646F6F6D6E7167667071686E6877656E6E66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993437.204:7055): pid=40401 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993437.206:7056): pid=40401 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993437.380:7057): pid=40401 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993437.381:7058): pid=40401 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993437.384:7059): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993437.385:7060): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993437.405:7061): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993437.406:7062): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993437.433:7063): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993437.433:7064): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993437.507:7065): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993437.507:7066): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993437.558:7067): pid=40431 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993437.558:7068): pid=40431 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746C64786C7568627570666A6C7679676F786B666F6C6D6266736475736D6869203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993437.559:7069): pid=40431 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993437.561:7070): pid=40431 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993437.759:7071): pid=40431 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993437.760:7072): pid=40431 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993437.764:7073): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993437.764:7074): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993437.828:7075): pid=40251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=40261 suid=74 rport=37820 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993437.829:7076): pid=40251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40261 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993437.829:7077): pid=40251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993437.830:7078): pid=40251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993437.830:7079): pid=40251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993437.894:7080): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993437.894:7081): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993437.945:7082): pid=40447 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993437.946:7083): pid=40447 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7870636163796B78706864706A7864726B747A786B647968766175706F727269203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993437.946:7084): pid=40447 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993437.949:7085): pid=40447 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993438.486:7086): pid=40447 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993438.487:7087): pid=40447 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993438.491:7088): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993438.491:7089): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993438.686:7090): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993438.687:7091): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993438.747:7092): pid=40535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993438.747:7093): pid=40535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6278646A68776F7375796D666677686666766C716F656E6E7878707462667172203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993438.748:7094): pid=40535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993438.751:7095): pid=40535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993438.981:7096): pid=40535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993438.981:7097): pid=40535 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993438.984:7098): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993438.984:7099): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993439.017:7100): pid=40542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40542 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993439.018:7101): pid=40452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40542 suid=74 rport=37828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993439.018:7102): pid=40452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=40542 suid=74 rport=37828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993439.208:7103): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993439.208:7104): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993439.265:7105): pid=40556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993439.265:7106): pid=40556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776A7A64706A69776B646B70787967756E69696761716D6F6369757570757773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993439.266:7107): pid=40556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993439.269:7108): pid=40556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993439.442:7109): pid=40556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993439.443:7110): pid=40556 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993439.446:7111): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993439.446:7112): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993439.556:7113): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993439.556:7114): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993439.615:7115): pid=40572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993439.615:7116): pid=40572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C766B6666676D6A6D7963676C77747A6F71716E67696B676B796F68647170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993439.616:7117): pid=40572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993439.618:7118): pid=40572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993439.809:7119): pid=40572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993439.809:7120): pid=40572 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993439.812:7121): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993439.812:7122): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993440.057:7123): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993440.057:7124): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993440.095:7125): pid=40588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993440.095:7126): pid=40588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676C77646D6C6C6667736B7066796B657462727A6D626374666E717864707171203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993440.096:7127): pid=40588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993440.098:7128): pid=40588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993440.242:7129): pid=40588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993440.242:7130): pid=40588 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993440.246:7131): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993440.246:7132): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993440.337:7133): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993440.337:7134): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993440.391:7135): pid=40604 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993440.391:7136): pid=40604 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79696379746F776278646763737274746E787464796D62746676756C69706673203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993440.392:7137): pid=40604 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993440.395:7138): pid=40604 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993440.592:7139): pid=40604 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993440.592:7140): pid=40604 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993440.596:7141): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993440.596:7142): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993440.959:7143): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993440.959:7144): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993441.008:7145): pid=40620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993441.008:7146): pid=40620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72747665767768706B7576746D666163757473736F696472697861706E6D7771203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993441.009:7147): pid=40620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993441.012:7148): pid=40620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993441.234:7149): pid=40620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993441.234:7150): pid=40620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993441.238:7151): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993441.238:7152): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993441.519:7153): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993441.519:7154): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993441.565:7155): pid=40648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993441.565:7156): pid=40648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D6D6877767963626D6167616C6F696E7A6B6669646B6D6C776262686C7163203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993441.566:7157): pid=40648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993441.568:7158): pid=40648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993442.135:7159): prog-id=282 op=LOAD
type=SYSCALL msg=audit(1780993442.135:7159): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe5ce4ec10 a2=90 a3=9500000000 items=0 ppid=40925 pid=40926 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993442.135:7159): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343762636363653036363030333334666363346535303434663666646331
type=BPF msg=audit(1780993442.136:7160): prog-id=283 op=LOAD
type=SYSCALL msg=audit(1780993442.136:7160): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc609a00d0 a2=90 a3=9500000000 items=0 ppid=40922 pid=40924 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993442.136:7160): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633961393664396434626163356630383438333231356133363763353664
type=BPF msg=audit(1780993442.171:7161): prog-id=284 op=LOAD
type=SYSCALL msg=audit(1780993442.171:7161): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc806adfa0 a2=90 a3=9500000000 items=0 ppid=40938 pid=40939 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993442.171:7161): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313637346430623337393237636136386439623664376463376566653236
type=BPF msg=audit(1780993442.225:7162): prog-id=285 op=LOAD
type=SYSCALL msg=audit(1780993442.225:7162): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff5a284760 a2=90 a3=9500000000 items=0 ppid=40959 pid=40960 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993442.225:7162): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303936336332303934303738323134343061633765353737656665646461
type=BPF msg=audit(1780993442.250:7163): prog-id=286 op=LOAD
type=SYSCALL msg=audit(1780993442.250:7163): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcc58f7130 a2=90 a3=9500000000 items=0 ppid=40974 pid=40975 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993442.250:7163): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666461366461616363643032653937363163366163616466623664623865
type=BPF msg=audit(1780993442.258:7164): prog-id=287 op=LOAD
type=SYSCALL msg=audit(1780993442.258:7164): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd5a50cf70 a2=90 a3=9500000000 items=0 ppid=40980 pid=40981 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993442.258:7164): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626630363636623937633261663837333833313136623531303531313363
type=CRYPTO_KEY_USER msg=audit(1780993442.640:7165): pid=40452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=40542 suid=74 rport=37828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993442.641:7166): pid=40452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40542 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993442.642:7167): pid=40452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993442.642:7168): pid=40452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=40452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993442.642:7169): pid=40452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993443.575:7170): pid=41071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=41071 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993443.578:7171): pid=41037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=41071 suid=74 rport=58776 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993443.578:7172): pid=41037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=41071 suid=74 rport=58776 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1780993444.402:7173): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993444.470:7174): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993444.845:7175): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993444.923:7176): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993445.065:7177): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993445.167:7178): prog-id=288 op=LOAD
type=SYSCALL msg=audit(1780993445.167:7178): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd0c9db0c0 a2=90 a3=9500000000 items=0 ppid=41830 pid=41831 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993445.167:7178): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613463316362373163303963393639313536623862656534376435366432
type=BPF msg=audit(1780993445.277:7179): prog-id=289 op=LOAD
type=SYSCALL msg=audit(1780993445.277:7179): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe762cc870 a2=90 a3=9500000000 items=0 ppid=41863 pid=41864 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993445.277:7179): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663261333037393064363863383362346438323838333331333837306337
type=BPF msg=audit(1780993445.600:7180): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993445.620:7181): prog-id=290 op=LOAD
type=SYSCALL msg=audit(1780993445.620:7181): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc3ed1d4f0 a2=90 a3=9500000000 items=0 ppid=42061 pid=42062 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993445.620:7181): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323132326565306539396564646563383666393732633562303066396438
type=BPF msg=audit(1780993445.833:7182): prog-id=291 op=LOAD
type=SYSCALL msg=audit(1780993445.833:7182): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff509472c0 a2=90 a3=9500000000 items=0 ppid=42130 pid=42131 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993445.833:7182): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656232333437616462653161636334343435623634653036613138393236
type=BPF msg=audit(1780993445.888:7183): prog-id=292 op=LOAD
type=SYSCALL msg=audit(1780993445.888:7183): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffa33fdf90 a2=90 a3=9500000000 items=0 ppid=42144 pid=42145 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993445.888:7183): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616162353163653963646637313765386536313265386134396562363863
type=BPF msg=audit(1780993448.328:7184): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993448.378:7185): pid=41037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=41071 suid=74 rport=58776 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993448.379:7186): pid=41037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=41071 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993448.379:7187): pid=41037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993448.380:7188): pid=41037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=41037 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993448.380:7189): pid=41037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1780993448.553:7190): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993450.317:7191): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993451.026:7192): pid=42915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=42915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993451.028:7193): pid=42732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=42915 suid=74 rport=58792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993451.028:7194): pid=42732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=42915 suid=74 rport=58792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1780993451.210:7195): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993452.936:7196): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993453.284:7197): pid=40648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993453.284:7198): pid=40648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993453.288:7199): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993453.288:7200): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993453.758:7201): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993453.758:7202): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993453.821:7203): pid=43051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993453.821:7204): pid=43051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A67686C637663747A726174787A73667761716D66716A73676D7778687663203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993453.822:7205): pid=43051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993453.827:7206): pid=43051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993454.012:7207): pid=43051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993454.012:7208): pid=43051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993454.016:7209): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993454.016:7210): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993454.127:7211): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993454.127:7212): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993454.185:7213): pid=43067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993454.186:7214): pid=43067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646B6B78637862736E67626168736779686D7A716679726C7475796B726B7A66203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993454.186:7215): pid=43067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993454.190:7216): pid=43067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993454.376:7217): pid=43067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993454.376:7218): pid=43067 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993454.380:7219): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993454.380:7220): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993454.643:7221): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993454.643:7222): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993454.749:7223): pid=43083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993454.749:7224): pid=43083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A73736369746A6D6477646E63786E776F65746F6177766E616F6E72707877203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993454.749:7225): pid=43083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993454.751:7226): pid=43083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993454.934:7227): pid=43083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993454.934:7228): pid=43083 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993454.939:7229): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993454.939:7230): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993455.121:7231): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993455.121:7232): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993455.151:7233): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993455.151:7234): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993455.173:7235): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993455.173:7236): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993455.207:7237): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993455.207:7238): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993455.233:7239): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993455.233:7240): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993455.292:7241): pid=43133 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993455.292:7242): pid=43133 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E6C6B6D68797A627273667765766A75766C6B78716B69796D6B6562616D75203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993455.293:7243): pid=43133 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993455.295:7244): pid=43133 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993455.461:7245): pid=43133 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993455.462:7246): pid=43133 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993455.466:7247): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993455.466:7248): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993455.490:7249): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993455.490:7250): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993455.503:7251): pid=42732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=42915 suid=74 rport=58792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993455.504:7252): pid=42732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=42915 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993455.505:7253): pid=42732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993455.505:7254): pid=42732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=42732 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993455.505:7255): pid=42732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993455.529:7256): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993455.529:7257): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993455.555:7258): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993455.555:7259): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993455.585:7260): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993455.585:7261): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993455.614:7262): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993455.614:7263): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993455.672:7264): pid=43176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993455.672:7265): pid=43176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6678667A6E786268697863746772616376767369767771756774616A69707479203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993455.672:7266): pid=43176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993455.675:7267): pid=43176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993455.848:7268): pid=43176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993455.849:7269): pid=43176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993455.852:7270): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993455.852:7271): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993455.874:7272): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993455.874:7273): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993455.903:7274): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993455.903:7275): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993455.957:7276): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993455.957:7277): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993455.987:7278): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993455.987:7279): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993456.011:7280): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993456.011:7281): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993456.045:7282): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993456.045:7283): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993456.068:7284): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993456.068:7285): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993456.129:7286): pid=43239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993456.129:7287): pid=43239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F646D6B69727062706966747A6761666565666362777175716F6764756C7976203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993456.130:7288): pid=43239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993456.132:7289): pid=43239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993456.289:7290): pid=43239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993456.289:7291): pid=43239 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993456.293:7292): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993456.293:7293): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993456.325:7294): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993456.325:7295): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993456.361:7296): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993456.361:7297): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993456.387:7298): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993456.387:7299): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993456.416:7300): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993456.416:7301): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993456.441:7302): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993456.441:7303): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993456.496:7304): pid=43284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=43284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993456.498:7305): pid=43179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=43284 suid=74 rport=53064 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993456.498:7306): pid=43179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=43284 suid=74 rport=53064 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1780993456.499:7307): pid=43282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993456.499:7308): pid=43282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F6F77626A7069666A7367696170717673616A61787171737666776F6D6F6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993456.500:7309): pid=43282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993456.502:7310): pid=43282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993456.684:7311): pid=43282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993456.684:7312): pid=43282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993456.688:7313): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993456.688:7314): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993456.712:7315): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993456.713:7316): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993456.742:7317): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993456.742:7318): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993456.859:7319): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993456.859:7320): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993456.890:7321): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993456.890:7322): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993456.919:7323): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993456.919:7324): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993456.955:7325): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993456.956:7326): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993456.986:7327): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993456.987:7328): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993457.046:7329): pid=43345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993457.046:7330): pid=43345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756862627062766669717778756861676A756D6771646A73697469676A62696F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993457.047:7331): pid=43345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993457.049:7332): pid=43345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993457.214:7333): pid=43345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993457.215:7334): pid=43345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993457.218:7335): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993457.219:7336): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993457.245:7337): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993457.245:7338): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993457.283:7339): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993457.283:7340): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993457.307:7341): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993457.307:7342): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993457.340:7343): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993457.340:7344): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993457.364:7345): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993457.364:7346): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993457.428:7347): pid=43388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993457.428:7348): pid=43388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6471746B776168716A6E77646E77646766637272696A6F6A7A6C6274786A73203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993457.429:7349): pid=43388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993457.431:7350): pid=43388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993457.606:7351): pid=43388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993457.606:7352): pid=43388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993457.610:7353): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993457.610:7354): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993457.632:7355): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993457.632:7356): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993457.660:7357): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993457.660:7358): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993457.762:7359): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993457.763:7360): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993457.793:7361): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993457.793:7362): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993457.817:7363): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993457.817:7364): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993457.847:7365): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993457.847:7366): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993457.867:7367): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993457.867:7368): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993457.915:7369): pid=43450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993457.915:7370): pid=43450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F796C616F75786B7672697569616C6766666D63707366746C656872717A63203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993457.915:7371): pid=43450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993457.918:7372): pid=43450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993458.092:7373): pid=43450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993458.093:7374): pid=43450 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993458.096:7375): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993458.097:7376): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993458.125:7377): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993458.125:7378): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993458.155:7379): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993458.156:7380): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993458.172:7381): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993458.172:7382): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993458.200:7383): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993458.200:7384): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993458.223:7385): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993458.223:7386): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993458.284:7387): pid=43493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993458.285:7388): pid=43493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F61727776687579636779796E736F65617666786C706D786E756F6975707971203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993458.285:7389): pid=43493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993458.288:7390): pid=43493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993458.457:7391): pid=43493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993458.458:7392): pid=43493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993458.461:7393): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993458.462:7394): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993458.488:7395): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993458.488:7396): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993458.522:7397): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993458.523:7398): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993458.607:7399): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993458.608:7400): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993458.665:7401): pid=43523 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993458.665:7402): pid=43523 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70696B6B626B6563626E74626F6C7A6571646F61677775696F6C64746A657667203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993458.666:7403): pid=43523 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993458.668:7404): pid=43523 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993459.170:7405): prog-id=293 op=LOAD
type=BPF msg=audit(1780993459.170:7406): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.172:7407): prog-id=294 op=LOAD
type=BPF msg=audit(1780993459.172:7408): prog-id=295 op=LOAD
type=BPF msg=audit(1780993459.172:7409): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.172:7410): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.174:7411): prog-id=296 op=LOAD
type=BPF msg=audit(1780993459.174:7412): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.176:7413): prog-id=297 op=LOAD
type=BPF msg=audit(1780993459.176:7414): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.176:7415): prog-id=298 op=LOAD
type=BPF msg=audit(1780993459.176:7416): prog-id=299 op=LOAD
type=BPF msg=audit(1780993459.176:7417): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.176:7418): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.176:7419): prog-id=300 op=LOAD
type=BPF msg=audit(1780993459.176:7420): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.176:7421): prog-id=301 op=LOAD
type=BPF msg=audit(1780993459.176:7422): prog-id=302 op=LOAD
type=BPF msg=audit(1780993459.176:7423): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.176:7424): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993459.372:7425): pid=43179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=43284 suid=74 rport=53064 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993459.374:7426): pid=43179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=43284 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993459.374:7427): pid=43179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993459.375:7428): pid=43179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=43179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993459.375:7429): pid=43179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1780993459.422:7430): prog-id=303 op=LOAD
type=BPF msg=audit(1780993459.422:7431): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.424:7432): prog-id=304 op=LOAD
type=BPF msg=audit(1780993459.424:7433): prog-id=305 op=LOAD
type=BPF msg=audit(1780993459.424:7434): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.424:7435): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.426:7436): prog-id=306 op=LOAD
type=BPF msg=audit(1780993459.426:7437): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.428:7438): prog-id=307 op=LOAD
type=BPF msg=audit(1780993459.428:7439): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.428:7440): prog-id=308 op=LOAD
type=BPF msg=audit(1780993459.428:7441): prog-id=309 op=LOAD
type=BPF msg=audit(1780993459.428:7442): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.429:7443): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.429:7444): prog-id=310 op=LOAD
type=BPF msg=audit(1780993459.429:7445): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.429:7446): prog-id=311 op=LOAD
type=BPF msg=audit(1780993459.429:7447): prog-id=312 op=LOAD
type=BPF msg=audit(1780993459.429:7448): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993459.429:7449): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993459.456:7450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo-container-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993459.489:7451): pid=43523 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993459.489:7452): pid=43523 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993459.494:7453): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993459.494:7454): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993459.560:7455): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993459.560:7456): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993459.593:7457): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993459.593:7458): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993459.615:7459): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993459.615:7460): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993459.652:7461): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993459.653:7462): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993459.681:7463): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993459.682:7464): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993459.743:7465): pid=43648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993459.743:7466): pid=43648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716B666A646A73736970616D74617062706772756971706E62626E6B79756A78203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993459.743:7467): pid=43648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993459.748:7468): pid=43648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993459.814:7469): pid=43651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=43651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993459.816:7470): pid=43602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=43651 suid=74 rport=51568 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993459.816:7471): pid=43602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=43651 suid=74 rport=51568 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993459.919:7472): pid=43648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993459.919:7473): pid=43648 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993459.924:7474): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993459.924:7475): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993459.946:7476): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993459.946:7477): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993459.983:7478): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993459.983:7479): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993460.003:7480): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993460.003:7481): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993460.033:7482): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993460.033:7483): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993460.053:7484): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993460.053:7485): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993460.112:7486): pid=43692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993460.113:7487): pid=43692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72636D78626167646971746F6D656B76677176786C627873627766666569646B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993460.113:7488): pid=43692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993460.116:7489): pid=43692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993460.280:7490): pid=43692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993460.280:7491): pid=43692 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993460.284:7492): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993460.284:7493): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993460.302:7494): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993460.303:7495): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993460.332:7496): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993460.332:7497): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993460.439:7498): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993460.439:7499): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993460.470:7500): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993460.470:7501): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993460.491:7502): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993460.491:7503): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993460.527:7504): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993460.527:7505): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993460.558:7506): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993460.558:7507): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993460.622:7508): pid=43754 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993460.622:7509): pid=43754 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76627861776C79766A627565746B6D6D66717961697762676968656369796F75203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993460.623:7510): pid=43754 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993460.627:7511): pid=43754 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993460.786:7512): pid=43754 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993460.786:7513): pid=43754 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993460.789:7514): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993460.789:7515): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993460.815:7516): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993460.815:7517): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993460.870:7518): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993460.870:7519): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993460.899:7520): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993460.899:7521): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993460.929:7522): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993460.929:7523): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993460.954:7524): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993460.954:7525): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993461.013:7526): pid=43797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993461.013:7527): pid=43797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B646E6E6D6A796E63677761706A6775657864696661756C6B6E6D6264717761203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993461.014:7528): pid=43797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993461.017:7529): pid=43797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993461.192:7530): pid=43797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993461.192:7531): pid=43797 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993461.196:7532): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993461.196:7533): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993461.222:7534): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993461.222:7535): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993461.249:7536): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993461.249:7537): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993461.350:7538): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993461.350:7539): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993461.408:7540): pid=43827 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993461.408:7541): pid=43827 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736E6C7561797671617075666C736573747871647A7A6E6770646A6E77767979203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993461.409:7542): pid=43827 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993461.411:7543): pid=43827 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993461.854:7544): prog-id=313 op=LOAD
type=BPF msg=audit(1780993461.854:7545): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993461.855:7546): prog-id=314 op=LOAD
type=BPF msg=audit(1780993461.855:7547): prog-id=315 op=LOAD
type=BPF msg=audit(1780993461.855:7548): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993461.855:7549): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993461.858:7550): prog-id=316 op=LOAD
type=BPF msg=audit(1780993461.858:7551): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993461.860:7552): prog-id=317 op=LOAD
type=BPF msg=audit(1780993461.860:7553): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993461.860:7554): prog-id=318 op=LOAD
type=BPF msg=audit(1780993461.860:7555): prog-id=319 op=LOAD
type=BPF msg=audit(1780993461.860:7556): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993461.860:7557): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993461.860:7558): prog-id=320 op=LOAD
type=BPF msg=audit(1780993461.860:7559): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993461.860:7560): prog-id=321 op=LOAD
type=BPF msg=audit(1780993461.860:7561): prog-id=322 op=LOAD
type=BPF msg=audit(1780993461.860:7562): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993461.860:7563): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993462.083:7564): prog-id=323 op=LOAD
type=BPF msg=audit(1780993462.083:7565): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993462.085:7566): prog-id=324 op=LOAD
type=BPF msg=audit(1780993462.085:7567): prog-id=325 op=LOAD
type=BPF msg=audit(1780993462.085:7568): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993462.085:7569): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993462.087:7570): prog-id=326 op=LOAD
type=BPF msg=audit(1780993462.087:7571): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993462.089:7572): prog-id=327 op=LOAD
type=BPF msg=audit(1780993462.089:7573): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993462.089:7574): prog-id=328 op=LOAD
type=BPF msg=audit(1780993462.089:7575): prog-id=329 op=LOAD
type=BPF msg=audit(1780993462.089:7576): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993462.089:7577): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993462.090:7578): prog-id=330 op=LOAD
type=BPF msg=audit(1780993462.090:7579): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993462.090:7580): prog-id=331 op=LOAD
type=BPF msg=audit(1780993462.090:7581): prog-id=332 op=LOAD
type=BPF msg=audit(1780993462.090:7582): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993462.090:7583): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993462.136:7584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993462.136:7585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993462.158:7586): pid=43827 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993462.158:7587): pid=43827 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993462.162:7588): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993462.162:7589): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993462.316:7590): pid=43602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=43651 suid=74 rport=51568 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993462.317:7591): pid=43602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=43651 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993462.317:7592): pid=43602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993462.318:7593): pid=43602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=43602 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993462.318:7594): pid=43602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993462.399:7595): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993462.399:7596): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993462.464:7597): pid=43920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993462.464:7598): pid=43920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707662736263656B6E716B6763796B726B707077636778796E6A667875706462203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993462.466:7599): pid=43920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993462.470:7600): pid=43920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993462.665:7601): pid=43920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993462.665:7602): pid=43920 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993462.669:7603): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993462.669:7604): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993462.848:7605): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993462.848:7606): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993462.910:7607): pid=43937 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993462.910:7608): pid=43937 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736561627A78777469696B6F66626D68637173766E756E61727279766163736C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993462.911:7609): pid=43937 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993462.912:7610): pid=43937 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993463.274:7611): pid=43937 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993463.275:7612): pid=43937 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993463.279:7613): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993463.279:7614): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993463.729:7615): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993463.729:7616): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993463.789:7617): pid=43977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993463.789:7618): pid=43977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7176786C7A76746A706E65617772716A77656A757974666F7A646A7A71627665203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993463.789:7619): pid=43977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993463.793:7620): pid=43977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993463.871:7621): pid=43980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=43980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993463.873:7622): pid=43923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=43980 suid=74 rport=51570 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993463.873:7623): pid=43923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=43980 suid=74 rport=51570 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1780993464.378:7624): prog-id=333 op=LOAD
type=SYSCALL msg=audit(1780993464.378:7624): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe238d34a0 a2=90 a3=9500000000 items=0 ppid=44129 pid=44132 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993464.378:7624): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313532306431353962613036623135643665666234313136636232323637
type=BPF msg=audit(1780993464.379:7625): prog-id=334 op=LOAD
type=SYSCALL msg=audit(1780993464.379:7625): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff0747e290 a2=90 a3=9500000000 items=0 ppid=44130 pid=44131 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993464.379:7625): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373837376436356166303037633637653434623262353662323832653434
type=BPF msg=audit(1780993464.438:7626): prog-id=335 op=LOAD
type=SYSCALL msg=audit(1780993464.438:7626): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc938b7dc0 a2=90 a3=9500000000 items=0 ppid=44136 pid=44137 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993464.438:7626): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663761366230626264666135666138363132343731326261323937623162
type=BPF msg=audit(1780993464.480:7627): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993464.488:7628): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993464.750:7629): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993465.207:7630): prog-id=336 op=LOAD
type=SYSCALL msg=audit(1780993465.207:7630): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc3299ea90 a2=90 a3=9500000000 items=0 ppid=44363 pid=44364 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993465.207:7630): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653666646531653530633534353861663230303766316631363332613532
type=BPF msg=audit(1780993465.238:7631): prog-id=337 op=LOAD
type=SYSCALL msg=audit(1780993465.238:7631): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcaec40520 a2=90 a3=9500000000 items=0 ppid=44368 pid=44369 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993465.238:7631): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636638613963363033666633353537383463306338643133663666623636
type=SERVICE_START msg=audit(1780993465.302:7632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993465.714:7633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993469.046:7634): pid=43923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=43980 suid=74 rport=51570 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993469.047:7635): pid=43923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=43980 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993469.048:7636): pid=43923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993469.048:7637): pid=43923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=43923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993469.048:7638): pid=43923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993470.676:7639): pid=45161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=45161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993470.677:7640): pid=45142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=45161 suid=74 rport=51584 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993470.677:7641): pid=45142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=45161 suid=74 rport=51584 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1780993471.174:7642): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993471.415:7643): pid=43977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993471.415:7644): pid=43977 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993471.420:7645): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993471.420:7646): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993471.535:7647): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993471.535:7648): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993471.600:7649): pid=45215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993471.600:7650): pid=45215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69756B6B74757176637065726B696274616E6B7863747470786F686D736C7974203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993471.601:7651): pid=45215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993471.607:7652): pid=45215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993471.807:7653): pid=45215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993471.807:7654): pid=45215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993471.809:7655): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993471.809:7656): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993471.833:7657): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993471.833:7658): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993471.886:7659): pid=45231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993471.886:7660): pid=45231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A75776A61646A6C726F74786B646C75646E6B69766773727966636D67746C65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993471.887:7661): pid=45231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993471.889:7662): pid=45231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993472.057:7663): pid=45231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993472.057:7664): pid=45231 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993472.061:7665): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993472.061:7666): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993472.081:7667): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993472.081:7668): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993472.110:7669): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993472.110:7670): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993472.132:7671): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993472.132:7672): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993472.172:7673): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993472.172:7674): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993472.371:7675): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993472.371:7676): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993472.408:7677): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993472.408:7678): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993472.432:7679): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993472.432:7680): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993472.490:7681): pid=45292 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993472.491:7682): pid=45292 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7068656F63676579796973776B68787762716671697864676B676D6A71676E73203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993472.492:7683): pid=45292 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993472.495:7684): pid=45292 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993472.678:7685): pid=45292 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993472.679:7686): pid=45292 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993472.682:7687): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993472.683:7688): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993472.707:7689): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993472.707:7690): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993472.759:7691): pid=45308 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993472.759:7692): pid=45308 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7679787A6866696A77796E79726D6F6872726D626D6C6E667A6B66616C6779203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993472.760:7693): pid=45308 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993472.762:7694): pid=45308 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993473.193:7695): prog-id=338 op=LOAD
type=BPF msg=audit(1780993473.193:7696): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993473.208:7697): prog-id=339 op=LOAD
type=BPF msg=audit(1780993473.208:7698): prog-id=340 op=LOAD
type=BPF msg=audit(1780993473.208:7699): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993473.208:7700): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993473.211:7701): prog-id=341 op=LOAD
type=BPF msg=audit(1780993473.211:7702): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993473.213:7703): prog-id=342 op=LOAD
type=BPF msg=audit(1780993473.213:7704): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993473.213:7705): prog-id=343 op=LOAD
type=BPF msg=audit(1780993473.213:7706): prog-id=344 op=LOAD
type=BPF msg=audit(1780993473.213:7707): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993473.213:7708): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993473.213:7709): prog-id=345 op=LOAD
type=BPF msg=audit(1780993473.213:7710): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993473.213:7711): prog-id=346 op=LOAD
type=BPF msg=audit(1780993473.213:7712): prog-id=347 op=LOAD
type=BPF msg=audit(1780993473.213:7713): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993473.213:7714): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993473.232:7715): pid=45308 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993473.232:7716): pid=45308 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993473.237:7717): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993473.237:7718): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993473.495:7719): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993473.495:7720): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993473.558:7721): pid=45360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993473.558:7722): pid=45360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F697377796D756C6C6361676B72766B6F6264716D736D68716B717364656475203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993473.559:7723): pid=45360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993473.563:7724): pid=45360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993474.088:7725): prog-id=348 op=LOAD
type=BPF msg=audit(1780993474.088:7726): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993474.098:7727): prog-id=349 op=LOAD
type=BPF msg=audit(1780993474.098:7728): prog-id=350 op=LOAD
type=BPF msg=audit(1780993474.098:7729): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993474.098:7730): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993474.100:7731): prog-id=351 op=LOAD
type=BPF msg=audit(1780993474.100:7732): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993474.103:7733): prog-id=352 op=LOAD
type=BPF msg=audit(1780993474.103:7734): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993474.103:7735): prog-id=353 op=LOAD
type=BPF msg=audit(1780993474.103:7736): prog-id=354 op=LOAD
type=BPF msg=audit(1780993474.103:7737): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993474.103:7738): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993474.103:7739): prog-id=355 op=LOAD
type=BPF msg=audit(1780993474.103:7740): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993474.103:7741): prog-id=356 op=LOAD
type=BPF msg=audit(1780993474.103:7742): prog-id=357 op=LOAD
type=BPF msg=audit(1780993474.103:7743): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993474.103:7744): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993474.198:7745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_metrics_qdr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993474.227:7746): pid=45360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993474.227:7747): pid=45360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993474.231:7748): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993474.231:7749): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993474.261:7750): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993474.261:7751): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993474.292:7752): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993474.292:7753): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993474.402:7754): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993474.402:7755): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993474.463:7756): pid=45440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993474.463:7757): pid=45440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74736979757364706D6963666972696C7A746375766D746E6674687879756E76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993474.464:7758): pid=45440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993474.468:7759): pid=45440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993474.658:7760): pid=45440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993474.658:7761): pid=45440 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993474.662:7762): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993474.662:7763): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993474.950:7764): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993474.950:7765): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993474.980:7766): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993474.980:7767): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993475.003:7768): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993475.003:7769): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993475.038:7770): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993475.038:7771): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993475.062:7772): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993475.063:7773): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993475.122:7774): pid=45488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993475.122:7775): pid=45488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797975796E73616C6C6D687266666C707463716D6B79747377636F797961716D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993475.123:7776): pid=45488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993475.126:7777): pid=45488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993475.289:7778): pid=45488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993475.289:7779): pid=45488 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993475.293:7780): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993475.293:7781): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993475.319:7782): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993475.319:7783): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993475.352:7784): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993475.352:7785): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993475.374:7786): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993475.374:7787): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993475.405:7788): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993475.405:7789): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993475.428:7790): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993475.428:7791): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993475.487:7792): pid=45531 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993475.487:7793): pid=45531 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E67657065667663747477696975616765636D627966647072767274616F6F6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993475.488:7794): pid=45531 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993475.491:7795): pid=45531 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993475.664:7796): pid=45531 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993475.664:7797): pid=45531 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993475.667:7798): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993475.668:7799): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993475.690:7800): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993475.690:7801): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993475.721:7802): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993475.722:7803): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993475.827:7804): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993475.827:7805): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993475.885:7806): pid=45561 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993475.885:7807): pid=45561 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71786C6373666B6B726F66617A6472667A61796674686B746D7662666368756E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993475.886:7808): pid=45561 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993475.889:7809): pid=45561 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993476.087:7810): pid=45561 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993476.087:7811): pid=45561 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993476.089:7812): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993476.089:7813): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993476.220:7814): pid=45142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=45161 suid=74 rport=51584 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993476.221:7815): pid=45142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=45161 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993476.221:7816): pid=45142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993476.222:7817): pid=45142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=45142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993476.222:7818): pid=45142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993476.353:7819): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993476.353:7820): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993476.410:7821): pid=45577 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993476.410:7822): pid=45577 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C726E717766766C6665616F696F7165706A6B706F7A61716162757468737276203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993476.411:7823): pid=45577 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993476.414:7824): pid=45577 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993476.596:7825): pid=45577 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993476.596:7826): pid=45577 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993476.599:7827): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993476.599:7828): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993476.696:7829): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993476.696:7830): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993476.747:7831): pid=45594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993476.748:7832): pid=45594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7870637278766F6C6B7A6E686171796F7A65757A626E6962747965746D716766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993476.748:7833): pid=45594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993476.751:7834): pid=45594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993476.936:7835): pid=45594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993476.936:7836): pid=45594 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993476.941:7837): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993476.941:7838): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993477.381:7839): pid=45597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=45597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993477.382:7840): pid=45579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=45597 suid=74 rport=49874 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993477.382:7841): pid=45579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=45597 suid=74 rport=49874 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993477.459:7842): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993477.459:7843): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993477.490:7844): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993477.490:7845): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993477.516:7846): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993477.516:7847): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993477.554:7848): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993477.554:7849): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993477.576:7850): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993477.576:7851): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993477.637:7852): pid=45643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993477.637:7853): pid=45643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716574687565716D6E6661647A6269747263617170626666776B6E6371726D72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993477.639:7854): pid=45643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993477.642:7855): pid=45643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993477.835:7856): pid=45643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993477.836:7857): pid=45643 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993477.840:7858): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993477.840:7859): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993477.869:7860): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993477.869:7861): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993477.907:7862): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993477.907:7863): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993477.928:7864): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993477.928:7865): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993477.960:7866): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993477.960:7867): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993477.981:7868): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993477.982:7869): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993478.040:7870): pid=45688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993478.040:7871): pid=45688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E716378646F69697A64697561776E69617874757A796F6C7478617464786D74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993478.041:7872): pid=45688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993478.043:7873): pid=45688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993478.217:7874): pid=45688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993478.218:7875): pid=45688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993478.221:7876): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993478.222:7877): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993478.241:7878): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993478.242:7879): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993478.272:7880): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993478.272:7881): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993478.572:7882): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993478.572:7883): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993478.597:7884): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993478.597:7885): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993478.617:7886): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993478.617:7887): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993478.652:7888): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993478.652:7889): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993478.672:7890): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993478.672:7891): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993478.728:7892): pid=45750 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993478.728:7893): pid=45750 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697267637279626766646E797271646879787264706A65786A66787668776C6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993478.729:7894): pid=45750 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993478.732:7895): pid=45750 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993478.868:7896): pid=45750 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993478.868:7897): pid=45750 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993478.872:7898): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993478.872:7899): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993478.900:7900): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993478.900:7901): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993478.928:7902): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993478.928:7903): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993478.948:7904): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993478.948:7905): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993478.978:7906): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993478.979:7907): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993479.001:7908): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993479.001:7909): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993479.061:7910): pid=45793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993479.061:7911): pid=45793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657967716673777A7969676B77796878777874626972627661626178776E626C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993479.062:7912): pid=45793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993479.065:7913): pid=45793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993479.247:7914): pid=45793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993479.248:7915): pid=45793 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993479.251:7916): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993479.252:7917): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993479.271:7918): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993479.271:7919): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993479.299:7920): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993479.299:7921): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993479.532:7922): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993479.532:7923): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993479.593:7924): pid=45823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993479.593:7925): pid=45823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63616D6B787376796668636F72686F75757A65656B7A65627A6D666C786D6162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993479.594:7926): pid=45823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993479.597:7927): pid=45823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993479.797:7928): pid=45823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993479.798:7929): pid=45823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993479.801:7930): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993479.801:7931): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993480.103:7932): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993480.103:7933): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993480.160:7934): pid=45841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993480.160:7935): pid=45841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69696A6967776667697762747A71736D7062767862757771697A6E616A786962203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993480.161:7936): pid=45841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993480.164:7937): pid=45841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993480.868:7938): pid=45841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993480.869:7939): pid=45841 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993480.870:7940): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993480.871:7941): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993481.047:7942): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993481.047:7943): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993481.102:7944): pid=45859 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993481.102:7945): pid=45859 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616873727A6172637678756479796971706E6D6674696C7961657673626F6B70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993481.103:7946): pid=45859 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993481.105:7947): pid=45859 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993481.986:7948): pid=45579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=45597 suid=74 rport=49874 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993481.987:7949): pid=45579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=45597 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993481.987:7950): pid=45579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993481.987:7951): pid=45579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=45579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993481.988:7952): pid=45579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993483.085:7953): pid=45903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=45903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993483.086:7954): pid=45876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=45903 suid=74 rport=50736 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993483.086:7955): pid=45876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=45903 suid=74 rport=50736 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993487.892:7956): pid=45876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=45903 suid=74 rport=50736 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993487.893:7957): pid=45876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=45903 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993487.893:7958): pid=45876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993487.894:7959): pid=45876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=45876 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993487.894:7960): pid=45876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993490.009:7961): pid=46010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993490.010:7962): pid=46000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46010 suid=74 rport=50750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993490.010:7963): pid=46000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46010 suid=74 rport=50750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993492.982:7964): pid=46000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46010 suid=74 rport=50750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993492.983:7965): pid=46000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46010 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993492.983:7966): pid=46000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993492.984:7967): pid=46000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993492.984:7968): pid=46000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993493.963:7969): pid=46038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993493.964:7970): pid=46032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46038 suid=74 rport=60268 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993493.964:7971): pid=46032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46038 suid=74 rport=60268 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993496.347:7972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993496.686:7973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993496.757:7974): pid=46032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46038 suid=74 rport=60268 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993496.757:7975): pid=46032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46038 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993496.758:7976): pid=46032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993496.759:7977): pid=46032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993496.759:7978): pid=46032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993497.577:7979): pid=46099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993497.578:7980): pid=46091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46099 suid=74 rport=60278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993497.578:7981): pid=46091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46099 suid=74 rport=60278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993500.354:7982): pid=46091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46099 suid=74 rport=60278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993500.354:7983): pid=46091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46099 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993500.355:7984): pid=46091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993500.355:7985): pid=46091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46091 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993500.355:7986): pid=46091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993501.616:7987): pid=46169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993501.617:7988): pid=46163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46169 suid=74 rport=38214 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993501.617:7989): pid=46163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46169 suid=74 rport=38214 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993505.126:7990): pid=46163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46169 suid=74 rport=38214 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993505.126:7991): pid=46163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46169 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993505.127:7992): pid=46163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993505.128:7993): pid=46163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993505.128:7994): pid=46163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993506.619:7995): pid=46320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993507.384:7996): pid=46307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46320 suid=74 rport=38222 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993507.384:7997): pid=46307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46320 suid=74 rport=38222 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993510.360:7998): pid=46307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46320 suid=74 rport=38222 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993510.360:7999): pid=46307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46320 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993510.361:8000): pid=46307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993510.362:8001): pid=46307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993510.362:8002): pid=46307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993512.138:8003): pid=46557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46557 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993512.139:8004): pid=46394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46557 suid=74 rport=51732 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993512.140:8005): pid=46394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46557 suid=74 rport=51732 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993514.964:8006): pid=46394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46557 suid=74 rport=51732 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993514.965:8007): pid=46394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46557 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993514.965:8008): pid=46394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993514.965:8009): pid=46394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993514.966:8010): pid=46394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993515.672:8011): pid=46584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993515.935:8012): pid=46583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=46584 suid=74 rport=36586 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993515.935:8013): pid=46583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=46584 suid=74 rport=36586 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993516.337:8014): pid=46595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46595 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993516.338:8015): pid=46581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46595 suid=74 rport=51742 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993516.338:8016): pid=46581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46595 suid=74 rport=51742 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993517.354:8017): pid=46583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46584 suid=74 rport=36586 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993517.355:8018): pid=46583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46584 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993517.355:8019): pid=46583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993517.356:8020): pid=46583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993517.356:8021): pid=46583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993518.879:8022): pid=46581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46595 suid=74 rport=51742 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993518.879:8023): pid=46581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46595 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993518.880:8024): pid=46581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993518.881:8025): pid=46581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993518.881:8026): pid=46581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993519.777:8027): pid=46663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993519.779:8028): pid=46659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46663 suid=74 rport=51748 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993519.779:8029): pid=46659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46663 suid=74 rport=51748 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993523.173:8030): pid=46659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46663 suid=74 rport=51748 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993523.173:8031): pid=46659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46663 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993523.174:8032): pid=46659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993523.174:8033): pid=46659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993523.174:8034): pid=46659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993524.325:8035): pid=46892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993526.053:8036): pid=46882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46892 suid=74 rport=47526 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993526.053:8037): pid=46882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=46892 suid=74 rport=47526 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993527.285:8038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993527.576:8039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993529.536:8040): pid=46882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=46892 suid=74 rport=47526 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993529.536:8041): pid=46882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46892 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993529.537:8042): pid=46882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993529.537:8043): pid=46882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=46882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993529.537:8044): pid=46882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993530.072:8045): pid=47009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993530.073:8046): pid=47006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47009 suid=74 rport=42828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993530.074:8047): pid=47006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47009 suid=74 rport=42828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993532.167:8048): pid=47006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=47009 suid=74 rport=42828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993532.167:8049): pid=47006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47009 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993532.168:8050): pid=47006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993532.168:8051): pid=47006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993532.168:8052): pid=47006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993532.739:8053): pid=47214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993532.740:8054): pid=47108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47214 suid=74 rport=42844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993532.740:8055): pid=47108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47214 suid=74 rport=42844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993534.055:8056): pid=47280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47280 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993534.258:8057): pid=47279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=47280 suid=74 rport=36314 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993534.259:8058): pid=47279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=47280 suid=74 rport=36314 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993535.373:8059): pid=47279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=47280 suid=74 rport=36314 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993535.374:8060): pid=47279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47280 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993535.374:8061): pid=47279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993535.374:8062): pid=47279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993535.374:8063): pid=47279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993536.245:8064): pid=47108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=47214 suid=74 rport=42844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993536.245:8065): pid=47108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47214 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993536.246:8066): pid=47108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993536.246:8067): pid=47108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47108 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993536.246:8068): pid=47108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993537.549:8069): pid=47306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993537.551:8070): pid=47293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47306 suid=74 rport=42852 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993537.551:8071): pid=47293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47306 suid=74 rport=42852 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993541.502:8072): pid=47293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=47306 suid=74 rport=42852 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993541.502:8073): pid=47293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47306 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993541.503:8074): pid=47293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993541.503:8075): pid=47293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993541.503:8076): pid=47293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993542.271:8077): pid=47468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47468 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993542.272:8078): pid=47379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47468 suid=74 rport=57362 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993542.273:8079): pid=47379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47468 suid=74 rport=57362 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993546.712:8080): pid=47379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=47468 suid=74 rport=57362 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993546.712:8081): pid=47379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47468 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993546.713:8082): pid=47379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993546.713:8083): pid=47379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993546.714:8084): pid=47379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993547.694:8085): pid=47704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993547.694:8086): pid=47697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47704 suid=74 rport=57378 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993547.694:8087): pid=47697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47704 suid=74 rport=57378 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993550.153:8088): pid=47697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=47704 suid=74 rport=57378 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993550.153:8089): pid=47697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47704 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993550.154:8090): pid=47697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993550.154:8091): pid=47697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47697 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993550.154:8092): pid=47697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993551.368:8093): pid=47751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47751 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993551.370:8094): pid=47741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47751 suid=74 rport=41666 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993551.370:8095): pid=47741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=47751 suid=74 rport=41666 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993552.592:8096): pid=47899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993552.681:8097): pid=47889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=47899 suid=74 rport=22752 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993552.682:8098): pid=47889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=47899 suid=74 rport=22752 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1780993552.738:8099): prog-id=358 op=LOAD
type=SYSCALL msg=audit(1780993552.738:8099): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff2a4c62f0 a2=90 a3=9500000000 items=0 ppid=47948 pid=47949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993552.738:8099): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643763663165616136366131326438333333626236326561353437656139
type=BPF msg=audit(1780993553.032:8100): prog-id=359 op=LOAD
type=BPF msg=audit(1780993553.032:8101): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993553.048:8102): prog-id=360 op=LOAD
type=BPF msg=audit(1780993553.048:8103): prog-id=361 op=LOAD
type=BPF msg=audit(1780993553.048:8104): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993553.048:8105): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993553.051:8106): prog-id=362 op=LOAD
type=BPF msg=audit(1780993553.051:8107): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993553.053:8108): prog-id=363 op=LOAD
type=BPF msg=audit(1780993553.053:8109): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993553.053:8110): prog-id=364 op=LOAD
type=BPF msg=audit(1780993553.053:8111): prog-id=365 op=LOAD
type=BPF msg=audit(1780993553.053:8112): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993553.053:8113): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993553.054:8114): prog-id=366 op=LOAD
type=BPF msg=audit(1780993553.054:8115): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993553.054:8116): prog-id=367 op=LOAD
type=BPF msg=audit(1780993553.054:8117): prog-id=368 op=LOAD
type=BPF msg=audit(1780993553.054:8118): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993553.054:8119): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993553.237:8120): pid=47889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=47899 suid=74 rport=22752 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993553.238:8121): pid=47889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47899 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993553.238:8122): pid=47889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.151 addr=45.148.10.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993553.239:8123): pid=47889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993553.239:8124): pid=47889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993555.379:8125): pid=47741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=47751 suid=74 rport=41666 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993555.380:8126): pid=47741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47751 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993555.380:8127): pid=47741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993555.381:8128): pid=47741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=47741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993555.381:8129): pid=47741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993556.656:8130): pid=48242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993556.657:8131): pid=48235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48242 suid=74 rport=41680 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993556.658:8132): pid=48235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48242 suid=74 rport=41680 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993558.180:8133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993558.451:8134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993559.670:8135): pid=48235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=48242 suid=74 rport=41680 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993559.671:8136): pid=48235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48242 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993559.672:8137): pid=48235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993559.672:8138): pid=48235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993559.673:8139): pid=48235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993560.668:8140): pid=48297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993560.669:8141): pid=48290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48297 suid=74 rport=54138 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993560.670:8142): pid=48290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48297 suid=74 rport=54138 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993563.812:8143): pid=48290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=48297 suid=74 rport=54138 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993563.812:8144): pid=48290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48297 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993563.812:8145): pid=48290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993563.813:8146): pid=48290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993563.813:8147): pid=48290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993564.537:8148): pid=48526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48526 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993564.538:8149): pid=48523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48526 suid=74 rport=54150 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993564.538:8150): pid=48523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48526 suid=74 rport=54150 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993566.678:8151): pid=48523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=48526 suid=74 rport=54150 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993566.679:8152): pid=48523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48526 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993566.680:8153): pid=48523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993566.680:8154): pid=48523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993566.680:8155): pid=48523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993567.260:8156): pid=48546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48546 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993567.261:8157): pid=48544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48546 suid=74 rport=54158 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993567.262:8158): pid=48544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48546 suid=74 rport=54158 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993569.283:8159): pid=48544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=48546 suid=74 rport=54158 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993569.284:8160): pid=48544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48546 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993569.284:8161): pid=48544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993569.285:8162): pid=48544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48544 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993569.285:8163): pid=48544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993570.201:8164): pid=48567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48567 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993570.202:8165): pid=48561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48567 suid=74 rport=55596 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993570.202:8166): pid=48561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48567 suid=74 rport=55596 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993573.312:8167): pid=48561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=48567 suid=74 rport=55596 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993573.313:8168): pid=48561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48567 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993573.314:8169): pid=48561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993573.314:8170): pid=48561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993573.314:8171): pid=48561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993575.784:8172): pid=48810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993575.785:8173): pid=48803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48810 suid=74 rport=55608 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993575.786:8174): pid=48803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48810 suid=74 rport=55608 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993579.829:8175): pid=48803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=48810 suid=74 rport=55608 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993579.829:8176): pid=48803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48810 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993579.830:8177): pid=48803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993579.831:8178): pid=48803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48803 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993579.831:8179): pid=48803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993580.692:8180): pid=48842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993580.700:8181): pid=48834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48842 suid=74 rport=53134 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993580.700:8182): pid=48834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=48842 suid=74 rport=53134 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993583.723:8183): pid=45859 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993583.724:8184): pid=45859 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993583.726:8185): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993583.727:8186): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993583.847:8187): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993583.847:8188): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993583.908:8189): pid=49078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993583.908:8190): pid=49078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F73686774656C6F67617271776F75626972686C6A6365696871696877656F6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993583.909:8191): pid=49078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993583.914:8192): pid=49078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993584.144:8193): pid=49078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993584.144:8194): pid=49078 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993584.148:8195): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993584.148:8196): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993584.391:8197): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993584.391:8198): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993584.492:8199): pid=49096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993584.492:8200): pid=49096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79686C786772797473727167687A6A756E746A7A6C65776C7A79766B70756B6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993584.493:8201): pid=49096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993584.495:8202): pid=49096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993584.834:8203): pid=49096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993584.834:8204): pid=49096 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993584.837:8205): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993584.837:8206): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993584.951:8207): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993584.951:8208): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993585.013:8209): pid=49117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993585.013:8210): pid=49117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706479726A72666D6F6C656C736B696564617875696B667A6C6A7A6366697A77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993585.014:8211): pid=49117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993585.017:8212): pid=49117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993585.086:8213): pid=48834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=48842 suid=74 rport=53134 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993585.087:8214): pid=48834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48842 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993585.087:8215): pid=48834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993585.088:8216): pid=48834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=48834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993585.088:8217): pid=48834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993585.183:8218): pid=49117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993585.184:8219): pid=49117 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993585.187:8220): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993585.187:8221): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993585.730:8222): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993585.730:8223): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993585.790:8224): pid=49134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993585.791:8225): pid=49134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F74656972726B687767656B6269676F62687A717369697175716E74636D75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993585.791:8226): pid=49134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993585.794:8227): pid=49134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993586.457:8228): pid=49134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993586.457:8229): pid=49134 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993586.460:8230): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993586.460:8231): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993586.571:8232): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993586.571:8233): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993586.611:8234): pid=49152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993586.611:8235): pid=49152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696C63657776696B70786F626D6766726D736B68646A736D6E626A6865726D74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993586.611:8236): pid=49152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993586.613:8237): pid=49152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993589.184:8238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993589.499:8239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993589.711:8240): pid=49243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993590.408:8241): pid=49120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=49243 suid=74 rport=53148 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993590.408:8242): pid=49120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=49243 suid=74 rport=53148 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993594.484:8243): pid=49120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49243 suid=74 rport=53148 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993594.484:8244): pid=49120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49243 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993594.484:8245): pid=49120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993594.485:8246): pid=49120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993594.485:8247): pid=49120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993595.602:8248): pid=49536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993595.603:8249): pid=49532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=49536 suid=74 rport=37522 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993595.603:8250): pid=49532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=49536 suid=74 rport=37522 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993598.759:8251): pid=49532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49536 suid=74 rport=37522 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993598.760:8252): pid=49532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49536 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993598.761:8253): pid=49532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993598.761:8254): pid=49532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993598.761:8255): pid=49532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993599.478:8256): pid=49571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993599.482:8257): pid=49565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=49571 suid=74 rport=37524 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993599.482:8258): pid=49565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=49571 suid=74 rport=37524 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993601.395:8259): pid=49565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49571 suid=74 rport=37524 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993601.396:8260): pid=49565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49571 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993601.396:8261): pid=49565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993601.397:8262): pid=49565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993601.397:8263): pid=49565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993602.702:8264): pid=49689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993602.703:8265): pid=49603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=49689 suid=74 rport=55466 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993602.703:8266): pid=49603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=49689 suid=74 rport=55466 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1780993606.757:8267): prog-id=369 op=LOAD
type=SYSCALL msg=audit(1780993606.757:8267): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffffc243c10 a2=90 a3=9500000000 items=0 ppid=49906 pid=49907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993606.757:8267): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303266333636393837616433323861343934626361353265366639376462
type=CRYPTO_KEY_USER msg=audit(1780993606.778:8268): pid=49603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49689 suid=74 rport=55466 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993606.779:8269): pid=49603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49689 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993606.780:8270): pid=49603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993606.780:8271): pid=49603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49603 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993606.780:8272): pid=49603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1780993607.108:8273): prog-id=370 op=LOAD
type=BPF msg=audit(1780993607.108:8274): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993607.118:8275): prog-id=371 op=LOAD
type=BPF msg=audit(1780993607.118:8276): prog-id=372 op=LOAD
type=BPF msg=audit(1780993607.118:8277): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993607.118:8278): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993607.121:8279): prog-id=373 op=LOAD
type=BPF msg=audit(1780993607.121:8280): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993607.124:8281): prog-id=374 op=LOAD
type=BPF msg=audit(1780993607.124:8282): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993607.124:8283): prog-id=375 op=LOAD
type=BPF msg=audit(1780993607.124:8284): prog-id=376 op=LOAD
type=BPF msg=audit(1780993607.124:8285): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993607.124:8286): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993607.124:8287): prog-id=377 op=LOAD
type=BPF msg=audit(1780993607.124:8288): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993607.124:8289): prog-id=378 op=LOAD
type=BPF msg=audit(1780993607.124:8290): prog-id=379 op=LOAD
type=BPF msg=audit(1780993607.124:8291): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993607.124:8292): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993607.751:8293): pid=50101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=50101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993607.752:8294): pid=49949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=50101 suid=74 rport=55476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993607.752:8295): pid=49949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=50101 suid=74 rport=55476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993611.419:8296): pid=49949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=50101 suid=74 rport=55476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993611.420:8297): pid=49949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=50101 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993611.420:8298): pid=49949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993611.421:8299): pid=49949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=49949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993611.421:8300): pid=49949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993611.498:8301): pid=49152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993611.499:8302): pid=49152 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993611.501:8303): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993611.501:8304): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1780993611.507:8305): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1780993611.617:8306): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993611.618:8307): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993611.689:8308): pid=50234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993611.689:8309): pid=50234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A637A74686264706470637A6B707164626875646C686A7371767A7867616F73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993611.690:8310): pid=50234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993611.694:8311): pid=50234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993611.870:8312): pid=50234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993611.870:8313): pid=50234 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993611.874:8314): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993611.874:8315): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993612.014:8316): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993612.014:8317): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993612.067:8318): pid=50331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993612.068:8319): pid=50331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6465777A6179736C6E7A7A6473756D666E736E6E6F6D61766C68786C6F686C70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993612.068:8320): pid=50331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993612.070:8321): pid=50331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993612.111:8322): prog-id=380 op=LOAD
type=SYSCALL msg=audit(1780993612.111:8322): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc64038540 a2=90 a3=9500000000 items=0 ppid=50339 pid=50340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993612.111:8322): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366535323433363436646533306362336639663466346234643633653231
type=USER_END msg=audit(1780993612.397:8323): pid=50331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993612.397:8324): pid=50331 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993612.401:8325): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993612.401:8326): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1780993612.451:8327): prog-id=381 op=LOAD
type=BPF msg=audit(1780993612.451:8328): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993612.467:8329): prog-id=382 op=LOAD
type=BPF msg=audit(1780993612.467:8330): prog-id=383 op=LOAD
type=BPF msg=audit(1780993612.467:8331): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993612.467:8332): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993612.470:8333): prog-id=384 op=LOAD
type=BPF msg=audit(1780993612.470:8334): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993612.472:8335): prog-id=385 op=LOAD
type=BPF msg=audit(1780993612.472:8336): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993612.472:8337): prog-id=386 op=LOAD
type=BPF msg=audit(1780993612.472:8338): prog-id=387 op=LOAD
type=BPF msg=audit(1780993612.472:8339): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993612.472:8340): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993612.472:8341): prog-id=388 op=LOAD
type=BPF msg=audit(1780993612.473:8342): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993612.473:8343): prog-id=389 op=LOAD
type=BPF msg=audit(1780993612.473:8344): prog-id=390 op=LOAD
type=BPF msg=audit(1780993612.473:8345): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993612.473:8346): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1780993612.512:8347): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993612.513:8348): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993612.575:8349): pid=50444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993612.575:8350): pid=50444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626670756D797673616178706E616E726E6478687977706E736E68787664696A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993612.576:8351): pid=50444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993612.577:8352): pid=50450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=50450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993612.578:8353): pid=50196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=50450 suid=74 rport=53612 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993612.578:8354): pid=50196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=50450 suid=74 rport=53612 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_START msg=audit(1780993612.580:8355): pid=50444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993612.722:8356): pid=50444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993612.722:8357): pid=50444 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993612.725:8358): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993612.725:8359): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993613.309:8360): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993613.309:8361): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993613.371:8362): pid=50721 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993613.371:8363): pid=50721 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A72686262766F646269727071647078686E7A76716C76657A78736965777679203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993613.372:8364): pid=50721 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993613.375:8365): pid=50721 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993614.028:8366): pid=50721 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993614.028:8367): pid=50721 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993614.030:8368): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993614.031:8369): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993614.163:8370): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993614.163:8371): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993614.224:8372): pid=50867 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993614.224:8373): pid=50867 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C747965656C706679627370756E66716475637464636564746C776A746464203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993614.225:8374): pid=50867 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993614.228:8375): pid=50867 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993615.358:8376): pid=50196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=50450 suid=74 rport=53612 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993615.359:8377): pid=50196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=50450 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993615.360:8378): pid=50196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993615.361:8379): pid=50196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=50196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993615.361:8380): pid=50196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993616.302:8381): pid=51382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=51382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993616.303:8382): pid=51305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=51382 suid=74 rport=53624 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993616.303:8383): pid=51305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=51382 suid=74 rport=53624 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993620.145:8384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993620.473:8385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993621.210:8386): pid=51305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=51382 suid=74 rport=53624 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993621.210:8387): pid=51305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=51382 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993621.210:8388): pid=51305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993621.211:8389): pid=51305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=51305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993621.211:8390): pid=51305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993622.144:8391): pid=52130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=52130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993622.145:8392): pid=51864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=52130 suid=74 rport=52188 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993622.146:8393): pid=51864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=52130 suid=74 rport=52188 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993626.219:8394): pid=51864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=52130 suid=74 rport=52188 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993626.220:8395): pid=51864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=52130 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993626.220:8396): pid=51864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993626.221:8397): pid=51864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=51864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993626.221:8398): pid=51864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993627.462:8399): pid=52472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=52472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993627.463:8400): pid=52465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=52472 suid=74 rport=52202 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993627.463:8401): pid=52465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=52472 suid=74 rport=52202 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993630.550:8402): pid=52465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=52472 suid=74 rport=52202 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993630.550:8403): pid=52465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=52472 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993630.551:8404): pid=52465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993630.551:8405): pid=52465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=52465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993630.551:8406): pid=52465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993631.798:8407): pid=52517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=52517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993631.800:8408): pid=52510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=52517 suid=74 rport=37122 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993631.800:8409): pid=52510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=52517 suid=74 rport=37122 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1780993633.921:8410): prog-id=391 op=LOAD
type=SYSCALL msg=audit(1780993633.921:8410): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff84046620 a2=90 a3=9500000000 items=0 ppid=52803 pid=52804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993633.921:8410): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306436633362346264373733363866356365333637633631646361383436
type=BPF msg=audit(1780993634.294:8411): prog-id=392 op=LOAD
type=BPF msg=audit(1780993634.294:8412): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993634.309:8413): prog-id=393 op=LOAD
type=BPF msg=audit(1780993634.309:8414): prog-id=394 op=LOAD
type=BPF msg=audit(1780993634.309:8415): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993634.309:8416): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993634.312:8417): prog-id=395 op=LOAD
type=BPF msg=audit(1780993634.312:8418): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993634.314:8419): prog-id=396 op=LOAD
type=BPF msg=audit(1780993634.314:8420): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993634.314:8421): prog-id=397 op=LOAD
type=BPF msg=audit(1780993634.314:8422): prog-id=398 op=LOAD
type=BPF msg=audit(1780993634.314:8423): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993634.314:8424): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993634.315:8425): prog-id=399 op=LOAD
type=BPF msg=audit(1780993634.315:8426): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993634.315:8427): prog-id=400 op=LOAD
type=BPF msg=audit(1780993634.315:8428): prog-id=401 op=LOAD
type=BPF msg=audit(1780993634.315:8429): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993634.315:8430): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993634.941:8431): pid=52510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=52517 suid=74 rport=37122 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993634.941:8432): pid=52510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=52517 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993634.942:8433): pid=52510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993634.943:8434): pid=52510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=52510 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993634.943:8435): pid=52510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993635.888:8436): pid=53004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=53004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993635.889:8437): pid=53000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=53004 suid=74 rport=37134 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993635.889:8438): pid=53000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=53004 suid=74 rport=37134 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993637.684:8439): pid=53000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=53004 suid=74 rport=37134 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993637.684:8440): pid=53000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=53004 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993637.684:8441): pid=53000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993637.685:8442): pid=53000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=53000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993637.685:8443): pid=53000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993638.273:8444): pid=53075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=53075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993638.274:8445): pid=53072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=53075 suid=74 rport=37138 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993638.274:8446): pid=53072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=53075 suid=74 rport=37138 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993638.649:8447): pid=50867 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993638.649:8448): pid=50867 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993638.653:8449): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993638.653:8450): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1780993638.687:8451): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1780993638.767:8452): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993638.767:8453): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993638.833:8454): pid=53176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993638.833:8455): pid=53176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62637473716B6C61737561786F69786A62716F7A74696E6C78616C64746A666E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993638.834:8456): pid=53176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993638.839:8457): pid=53176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993639.023:8458): pid=53176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993639.023:8459): pid=53176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993639.026:8460): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993639.026:8461): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993639.168:8462): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993639.168:8463): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993639.228:8464): pid=53283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993639.228:8465): pid=53283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7679766F7A6B716A726D7A63767A737769636A7869716F666A747477666170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993639.229:8466): pid=53283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993639.231:8467): pid=53283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993639.292:8468): prog-id=402 op=LOAD
type=SYSCALL msg=audit(1780993639.292:8468): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffb3749290 a2=90 a3=9500000000 items=0 ppid=53289 pid=53290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993639.292:8468): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366266393836356364353538313536396663313035393036663032633639
type=USER_END msg=audit(1780993639.578:8469): pid=53283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993639.578:8470): pid=53283 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993639.580:8471): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993639.580:8472): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1780993639.675:8473): prog-id=403 op=LOAD
type=BPF msg=audit(1780993639.675:8474): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993639.684:8475): prog-id=404 op=LOAD
type=BPF msg=audit(1780993639.684:8476): prog-id=405 op=LOAD
type=BPF msg=audit(1780993639.684:8477): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993639.684:8478): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993639.687:8479): prog-id=406 op=LOAD
type=BPF msg=audit(1780993639.687:8480): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993639.689:8481): prog-id=407 op=LOAD
type=BPF msg=audit(1780993639.689:8482): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993639.689:8483): prog-id=408 op=LOAD
type=BPF msg=audit(1780993639.689:8484): prog-id=409 op=LOAD
type=BPF msg=audit(1780993639.689:8485): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993639.689:8486): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993639.690:8487): prog-id=410 op=LOAD
type=BPF msg=audit(1780993639.690:8488): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993639.690:8489): prog-id=411 op=LOAD
type=BPF msg=audit(1780993639.690:8490): prog-id=412 op=LOAD
type=BPF msg=audit(1780993639.690:8491): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993639.690:8492): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1780993639.701:8493): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993639.701:8494): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993639.763:8495): pid=53388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993639.763:8496): pid=53388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72646466647568677473636E7061737074676C6D676C6E7561676C6E64746574203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993639.764:8497): pid=53388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993639.769:8498): pid=53388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993639.937:8499): pid=53388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993639.937:8500): pid=53388 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993639.942:8501): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993639.942:8502): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993640.400:8503): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993640.400:8504): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993640.449:8505): pid=53072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=53075 suid=74 rport=37138 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993640.449:8506): pid=53072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=53075 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993640.450:8507): pid=53072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993640.450:8508): pid=53072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=53072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993640.451:8509): pid=53072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993640.464:8510): pid=53499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993640.465:8511): pid=53499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706A6271627265737A746D7772727866646D7A6570616D6964636F6179726276203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993640.465:8512): pid=53499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993640.469:8513): pid=53499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993640.649:8514): pid=53499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993640.649:8515): pid=53499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993640.653:8516): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993640.653:8517): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993640.869:8518): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993640.869:8519): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993640.898:8520): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993640.898:8521): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993640.920:8522): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993640.920:8523): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993640.955:8524): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993640.955:8525): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993640.980:8526): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993640.980:8527): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993641.038:8528): pid=53550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993641.038:8529): pid=53550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F766864657267796B726A73616E76757161656F786C67786E77726276677262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993641.038:8530): pid=53550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993641.042:8531): pid=53550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993641.220:8532): pid=53550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993641.220:8533): pid=53550 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993641.224:8534): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993641.224:8535): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993641.249:8536): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993641.249:8537): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993641.305:8538): pid=53620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993641.305:8539): pid=53620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6872736B72647966757967786665786C72716C69676B76687172737376627377203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993641.306:8540): pid=53620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993641.309:8541): pid=53620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993641.486:8542): pid=53620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993641.486:8543): pid=53620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993641.490:8544): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993641.490:8545): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993641.510:8546): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993641.510:8547): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993641.535:8548): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993641.535:8549): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993641.623:8550): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993641.623:8551): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993641.652:8552): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993641.652:8553): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993641.672:8554): pid=53650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=53650 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993641.673:8555): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993641.673:8556): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993641.674:8557): pid=53504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=53650 suid=74 rport=57030 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993641.674:8558): pid=53504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=53650 suid=74 rport=57030 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993641.712:8559): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993641.712:8560): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993641.742:8561): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993641.742:8562): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993641.781:8563): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993641.781:8564): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993641.811:8565): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993641.811:8566): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993641.849:8567): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993641.849:8568): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993641.869:8569): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993641.869:8570): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993641.895:8571): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993641.895:8572): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993641.917:8573): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993641.917:8574): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993641.989:8575): pid=53765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993641.990:8576): pid=53765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993641.991:8577): pid=53765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993641.993:8578): pid=53765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993642.200:8579): pid=53765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993642.201:8580): pid=53765 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993642.203:8581): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993642.203:8582): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993642.271:8583): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993642.271:8584): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993642.329:8585): pid=53795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993642.329:8586): pid=53795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727168726B6A6C6D7678666C657870666F6D697A706378756C677A786D6A6C72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993642.330:8587): pid=53795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993642.332:8588): pid=53795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993642.507:8589): pid=53795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993642.508:8590): pid=53795 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993642.511:8591): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993642.511:8592): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993644.169:8593): pid=54237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=54237 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993644.451:8594): pid=54236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=54237 suid=74 rport=48952 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993644.452:8595): pid=54236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=54237 suid=74 rport=48952 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993645.941:8596): pid=54236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=54237 suid=74 rport=48952 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993645.941:8597): pid=54236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=54237 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993645.942:8598): pid=54236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993645.942:8599): pid=54236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=54236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993645.942:8600): pid=54236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993646.031:8601): pid=53504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=53650 suid=74 rport=57030 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993646.032:8602): pid=53504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=53650 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993646.032:8603): pid=53504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993646.033:8604): pid=53504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=53504 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993646.033:8605): pid=53504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993647.027:8606): pid=54428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=54428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993647.029:8607): pid=54420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=54428 suid=74 rport=57046 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993647.029:8608): pid=54420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=54428 suid=74 rport=57046 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993650.349:8609): pid=54420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=54428 suid=74 rport=57046 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993650.350:8610): pid=54420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=54428 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993650.350:8611): pid=54420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993650.350:8612): pid=54420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=54420 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993650.350:8613): pid=54420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993651.198:8614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993651.504:8615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993652.577:8616): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993652.577:8617): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993652.633:8618): pid=54766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993652.633:8619): pid=54766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676D676963686A6670666F676263656C666E6577686C6567787565616A75756C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993652.633:8620): pid=54766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993652.637:8621): pid=54766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993652.775:8622): pid=54766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993652.775:8623): pid=54766 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993652.780:8624): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993652.780:8625): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993652.886:8626): pid=54835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=54835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993652.887:8627): pid=54682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=54835 suid=74 rport=34940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993652.887:8628): pid=54682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=54835 suid=74 rport=34940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993655.912:8629): pid=55222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=55222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993656.114:8630): pid=55218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=55222 suid=74 rport=49792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993656.114:8631): pid=55218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=55222 suid=74 rport=49792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993656.362:8632): pid=54682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=54835 suid=74 rport=34940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993656.363:8633): pid=54682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=54835 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993656.363:8634): pid=54682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993656.364:8635): pid=54682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=54682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993656.364:8636): pid=54682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993657.236:8637): pid=55218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=55222 suid=74 rport=49792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993657.237:8638): pid=55218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=55222 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993657.237:8639): pid=55218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993657.238:8640): pid=55218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=55218 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993657.238:8641): pid=55218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993657.538:8642): pid=55333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=55333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993657.540:8643): pid=55331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=55333 suid=74 rport=34948 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993657.540:8644): pid=55331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=55333 suid=74 rport=34948 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993660.338:8645): pid=55331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=55333 suid=74 rport=34948 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993660.338:8646): pid=55331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=55333 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993660.339:8647): pid=55331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993660.339:8648): pid=55331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=55331 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993660.339:8649): pid=55331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993661.437:8650): pid=55337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=55337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993661.437:8651): pid=55336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=55337 suid=74 rport=54238 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993661.439:8652): pid=55336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=55337 suid=74 rport=54238 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993662.839:8653): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993662.839:8654): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993662.887:8655): pid=55351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993662.887:8656): pid=55351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6370797674736D6D6B65796666616A6C76656B736877757878747A65646578203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993662.888:8657): pid=55351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993662.892:8658): pid=55351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993663.054:8659): pid=55351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993663.055:8660): pid=55351 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993663.057:8661): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993663.057:8662): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993663.350:8663): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993663.350:8664): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993663.404:8665): pid=55490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993663.404:8666): pid=55490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B6B786A7178656F6973756E6B716A796B66626765627164716D79646B7268203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993663.404:8667): pid=55490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993663.406:8668): pid=55490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993663.600:8669): pid=55490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993663.601:8670): pid=55490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993663.605:8671): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993663.605:8672): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993663.693:8673): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993663.693:8674): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993663.754:8675): pid=55547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993663.754:8676): pid=55547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A79787874636473786E7874726F786D7868747768657777647767686B6A6566203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993663.755:8677): pid=55547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993663.758:8678): pid=55547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993663.952:8679): pid=55547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993663.953:8680): pid=55547 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993663.956:8681): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993663.956:8682): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993664.106:8683): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993664.106:8684): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993664.136:8685): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993664.136:8686): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993664.154:8687): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993664.154:8688): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993664.188:8689): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993664.188:8690): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993664.208:8691): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993664.208:8692): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993664.260:8693): pid=55638 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993664.260:8694): pid=55638 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77646F786176766F6C6E72776A736D736F617A7A6A7377686A7A62677267686B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993664.261:8695): pid=55638 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993664.263:8696): pid=55638 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993664.434:8697): pid=55638 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993664.435:8698): pid=55638 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993664.439:8699): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993664.439:8700): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993664.461:8701): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993664.461:8702): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993664.525:8703): pid=55656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993664.525:8704): pid=55656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7271696962657964746B716F6561636D61797171696F72747467656A6E7067203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993664.526:8705): pid=55656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993664.529:8706): pid=55656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993664.720:8707): pid=55656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993664.720:8708): pid=55656 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993664.724:8709): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993664.724:8710): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993664.748:8711): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993664.748:8712): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993664.779:8713): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993664.779:8714): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993664.855:8715): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993664.855:8716): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993664.918:8717): pid=55686 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993664.918:8718): pid=55686 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626F616F6477727A69726F6E6F747A616F6C65787976727565657065707A6668203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993664.919:8719): pid=55686 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993664.921:8720): pid=55686 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993665.105:8721): pid=55686 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993665.106:8722): pid=55686 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993665.109:8723): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993665.109:8724): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993665.210:8725): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993665.211:8726): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993665.261:8727): pid=55702 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993665.261:8728): pid=55702 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71686C6D6166707A786575766F646A6F64716372686E726C766F686769756577203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993665.262:8729): pid=55702 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993665.264:8730): pid=55702 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993665.753:8731): pid=55702 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993665.753:8732): pid=55702 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993665.757:8733): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993665.757:8734): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993665.943:8735): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993665.943:8736): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993665.971:8737): pid=55336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=55337 suid=74 rport=54238 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993665.971:8738): pid=55336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=55337 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993665.972:8739): pid=55336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993665.972:8740): pid=55336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=55336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993665.972:8741): pid=55336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993666.005:8742): pid=55838 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993666.005:8743): pid=55838 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A796A666475667662707A736C696A71796163737A6C766C767A65636A626362203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993666.006:8744): pid=55838 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993666.007:8745): pid=55838 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993666.226:8746): pid=55838 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993666.227:8747): pid=55838 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993666.230:8748): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993666.230:8749): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993666.597:8750): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993666.597:8751): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993666.652:8752): pid=55919 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993666.652:8753): pid=55919 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A636F6270656373766A71716E6B6B6E6271616E676861647365747A61756D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993666.653:8754): pid=55919 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993666.655:8755): pid=55919 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993666.846:8756): pid=55919 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993666.846:8757): pid=55919 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993666.850:8758): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993666.850:8759): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993666.948:8760): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993666.948:8761): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993667.007:8762): pid=55988 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993667.007:8763): pid=55988 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657469797162797174766F6F6378717179736D656B696276676D6A6B6F73676C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993667.008:8764): pid=55988 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993667.010:8765): pid=55988 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993667.237:8766): pid=55988 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993667.237:8767): pid=55988 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993667.241:8768): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993667.241:8769): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993667.263:8770): pid=56019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=56019 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993667.264:8771): pid=55844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=56019 suid=74 rport=54240 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993667.264:8772): pid=55844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=56019 suid=74 rport=54240 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993667.494:8773): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993667.494:8774): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993667.552:8775): pid=56061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993667.553:8776): pid=56061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72716B6C74786F7564767A6F646463646F676471657A627176617162766A6763203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993667.554:8777): pid=56061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993667.557:8778): pid=56061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993667.744:8779): pid=56061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993667.745:8780): pid=56061 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993667.748:8781): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993667.748:8782): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993667.861:8783): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993667.861:8784): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993667.896:8785): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993667.897:8786): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993667.914:8787): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993667.914:8788): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993667.948:8789): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993667.948:8790): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993667.974:8791): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993667.974:8792): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993668.028:8793): pid=56121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993668.029:8794): pid=56121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726F686367787967786F786F7874646F7266776B747876686462656E73696F73203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993668.030:8795): pid=56121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993668.032:8796): pid=56121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993668.201:8797): pid=56121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993668.201:8798): pid=56121 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993668.205:8799): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993668.205:8800): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993668.229:8801): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993668.229:8802): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993668.280:8803): pid=56140 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993668.280:8804): pid=56140 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696478756A77626A6B6675746E6C6B6862626A727075686974696B7572776A79203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993668.280:8805): pid=56140 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993668.282:8806): pid=56140 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993668.462:8807): pid=56140 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993668.463:8808): pid=56140 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993668.466:8809): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993668.467:8810): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993668.487:8811): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993668.488:8812): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993668.512:8813): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993668.512:8814): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993668.571:8815): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993668.571:8816): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993668.594:8817): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993668.594:8818): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993668.614:8819): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993668.614:8820): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993668.642:8821): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993668.642:8822): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993668.661:8823): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993668.662:8824): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993668.717:8825): pid=56204 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993668.717:8826): pid=56204 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676A747A6E6E657567776365786E7976757269726B796A65766968667379746C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993668.718:8827): pid=56204 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993668.720:8828): pid=56204 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993668.900:8829): pid=56204 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993668.900:8830): pid=56204 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993668.904:8831): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993668.904:8832): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993668.924:8833): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993668.924:8834): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993668.976:8835): pid=56222 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993668.977:8836): pid=56222 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C6D6F647867736568617971746271627265737A636169796D62716B656971203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993668.977:8837): pid=56222 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993668.979:8838): pid=56222 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993669.160:8839): pid=56222 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993669.160:8840): pid=56222 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993669.164:8841): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993669.164:8842): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993669.181:8843): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993669.181:8844): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993669.208:8845): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993669.208:8846): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993669.329:8847): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993669.329:8848): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993669.358:8849): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993669.358:8850): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993669.382:8851): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993669.382:8852): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993669.416:8853): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993669.416:8854): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993669.443:8855): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993669.443:8856): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993669.500:8857): pid=56284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993669.501:8858): pid=56284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7566767A6B62616261616368747768757762636D6A726C63746E627A6561626D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993669.502:8859): pid=56284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993669.505:8860): pid=56284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993669.682:8861): pid=56284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993669.682:8862): pid=56284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993669.686:8863): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993669.686:8864): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993669.709:8865): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993669.709:8866): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993669.766:8867): pid=56302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993669.766:8868): pid=56302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70667671626A72726A716C707373796D676770756E7375637369796378767166203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993669.767:8869): pid=56302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993669.770:8870): pid=56302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993669.946:8871): pid=56302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993669.947:8872): pid=56302 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993669.950:8873): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993669.950:8874): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993669.972:8875): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993669.972:8876): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993670.003:8877): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993670.003:8878): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993670.101:8879): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993670.101:8880): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993670.130:8881): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993670.130:8882): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993670.149:8883): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993670.149:8884): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993670.183:8885): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993670.183:8886): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993670.207:8887): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993670.207:8888): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993670.267:8889): pid=56364 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993670.267:8890): pid=56364 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786E71706364646D776177617A76796A6D677262636E7A776A6A7974746F7365203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993670.268:8891): pid=56364 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993670.270:8892): pid=56364 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993670.498:8893): pid=56364 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993670.498:8894): pid=56364 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993670.501:8895): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993670.501:8896): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993670.525:8897): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993670.525:8898): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993670.570:8899): pid=56382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993670.570:8900): pid=56382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6A7266796B6C756974666A6573746A79717068616E7164697A6871756E6F6A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993670.572:8901): pid=56382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993670.574:8902): pid=56382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993670.712:8903): pid=56382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993670.713:8904): pid=56382 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993670.716:8905): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993670.716:8906): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993670.735:8907): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993670.736:8908): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993670.766:8909): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993670.766:8910): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993670.871:8911): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993670.871:8912): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993670.930:8913): pid=56412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993670.930:8914): pid=56412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6E6F7568647977667974657678767A6874617273667077717A786673616564203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993670.931:8915): pid=56412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993670.933:8916): pid=56412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993671.254:8917): pid=55844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=56019 suid=74 rport=54240 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993671.254:8918): pid=55844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=56019 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993671.255:8919): pid=55844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993671.255:8920): pid=55844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=55844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993671.255:8921): pid=55844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1780993671.461:8922): prog-id=413 op=LOAD
type=BPF msg=audit(1780993671.461:8923): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993671.480:8924): prog-id=414 op=LOAD
type=BPF msg=audit(1780993671.480:8925): prog-id=415 op=LOAD
type=BPF msg=audit(1780993671.480:8926): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993671.481:8927): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993671.484:8928): prog-id=416 op=LOAD
type=BPF msg=audit(1780993671.484:8929): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993671.486:8930): prog-id=417 op=LOAD
type=BPF msg=audit(1780993671.486:8931): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993671.486:8932): prog-id=418 op=LOAD
type=BPF msg=audit(1780993671.486:8933): prog-id=419 op=LOAD
type=BPF msg=audit(1780993671.486:8934): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993671.486:8935): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993671.487:8936): prog-id=420 op=LOAD
type=BPF msg=audit(1780993671.487:8937): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993671.487:8938): prog-id=421 op=LOAD
type=BPF msg=audit(1780993671.487:8939): prog-id=422 op=LOAD
type=BPF msg=audit(1780993671.487:8940): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993671.487:8941): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993671.553:8942): pid=56412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993671.554:8943): pid=56412 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993671.558:8944): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993671.558:8945): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993671.671:8946): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993671.671:8947): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993671.701:8948): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993671.701:8949): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993671.722:8950): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993671.722:8951): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993671.759:8952): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993671.759:8953): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993671.786:8954): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993671.786:8955): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993671.848:8956): pid=56499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993671.848:8957): pid=56499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7870797077736F6C6475717061707174676F6165616C6F677671716477627164203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993671.849:8958): pid=56499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993671.855:8959): pid=56499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993671.857:8960): pid=56501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=56501 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993671.858:8961): pid=56451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=56501 suid=74 rport=55026 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993671.859:8962): pid=56451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=56501 suid=74 rport=55026 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993672.036:8963): pid=56499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993672.037:8964): pid=56499 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993672.041:8965): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993672.041:8966): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993672.062:8967): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993672.062:8968): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993672.122:8969): pid=56518 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993672.122:8970): pid=56518 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77736D6D75766C6768616966706B6B6A7A7A6372616C646E6971726C62756266203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993672.123:8971): pid=56518 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993672.125:8972): pid=56518 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993672.297:8973): pid=56518 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993672.297:8974): pid=56518 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993672.301:8975): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993672.301:8976): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993672.317:8977): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993672.317:8978): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993672.349:8979): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993672.349:8980): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993672.414:8981): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993672.414:8982): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993672.442:8983): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993672.442:8984): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993672.464:8985): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993672.464:8986): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993672.499:8987): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993672.499:8988): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993672.523:8989): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993672.523:8990): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993672.575:8991): pid=56580 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993672.575:8992): pid=56580 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A666675666567796777746578726A6F7568766263716C7664656F6765647974203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993672.576:8993): pid=56580 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993672.579:8994): pid=56580 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993672.782:8995): pid=56580 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993672.782:8996): pid=56580 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993672.786:8997): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993672.786:8998): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993672.800:8999): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993672.800:9000): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993672.844:9001): pid=56598 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993672.844:9002): pid=56598 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E71686F6575636E706F78796C697978797864796D7163666D72736E71696372203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993672.844:9003): pid=56598 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993672.846:9004): pid=56598 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993673.039:9005): pid=56598 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993673.039:9006): pid=56598 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993673.042:9007): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993673.042:9008): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993673.065:9009): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993673.065:9010): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993673.092:9011): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993673.092:9012): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993673.182:9013): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993673.183:9014): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993673.238:9015): pid=56710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993673.239:9016): pid=56710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6F6C6A686A797263787062757379686A7769666A766D776575767A6B756F72203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993673.239:9017): pid=56710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993673.243:9018): pid=56710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993673.753:9019): prog-id=423 op=LOAD
type=BPF msg=audit(1780993673.753:9020): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993673.766:9021): prog-id=424 op=LOAD
type=BPF msg=audit(1780993673.767:9022): prog-id=425 op=LOAD
type=BPF msg=audit(1780993673.767:9023): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993673.767:9024): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993673.770:9025): prog-id=426 op=LOAD
type=BPF msg=audit(1780993673.770:9026): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993673.772:9027): prog-id=427 op=LOAD
type=BPF msg=audit(1780993673.772:9028): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993673.772:9029): prog-id=428 op=LOAD
type=BPF msg=audit(1780993673.772:9030): prog-id=429 op=LOAD
type=BPF msg=audit(1780993673.772:9031): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993673.772:9032): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993673.772:9033): prog-id=430 op=LOAD
type=BPF msg=audit(1780993673.772:9034): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993673.773:9035): prog-id=431 op=LOAD
type=BPF msg=audit(1780993673.773:9036): prog-id=432 op=LOAD
type=BPF msg=audit(1780993673.773:9037): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993673.773:9038): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993673.861:9039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993673.861:9040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993673.886:9041): pid=56710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993673.886:9042): pid=56710 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993673.890:9043): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993673.890:9044): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993674.123:9045): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993674.123:9046): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993674.182:9047): pid=56890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993674.182:9048): pid=56890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64726B7362746B7965647A6767726462656B6266636F69647971717378656362203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993674.183:9049): pid=56890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993674.188:9050): pid=56890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993674.373:9051): pid=56890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993674.374:9052): pid=56890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993674.377:9053): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993674.377:9054): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993674.589:9055): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993674.589:9056): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993674.627:9057): pid=56451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=56501 suid=74 rport=55026 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993674.627:9058): pid=56451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=56501 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993674.628:9059): pid=56451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993674.629:9060): pid=56451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=56451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993674.629:9061): pid=56451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993674.651:9062): pid=56906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993674.652:9063): pid=56906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7768756373716361776D65686D6C697A6769786266686474616F687A6A757264203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993674.652:9064): pid=56906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993674.655:9065): pid=56906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993675.086:9066): pid=56906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993675.087:9067): pid=56906 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993675.091:9068): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993675.091:9069): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993675.664:9070): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993675.664:9071): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993675.718:9072): pid=56952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=56952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993675.719:9073): pid=56923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=56952 suid=74 rport=55028 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993675.720:9074): pid=56923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=56952 suid=74 rport=55028 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1780993675.730:9075): pid=56950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993675.731:9076): pid=56950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C626A617A66666B6A706B6173766463626E6673696B6275626D7A6571616566203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993675.732:9077): pid=56950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993675.737:9078): pid=56950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993676.254:9079): prog-id=433 op=LOAD
type=SYSCALL msg=audit(1780993676.254:9079): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcb587bee0 a2=90 a3=9500000000 items=0 ppid=57149 pid=57150 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993676.254:9079): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613633363962353038633437663864346235633064343434623936306531
type=BPF msg=audit(1780993676.275:9080): prog-id=434 op=LOAD
type=SYSCALL msg=audit(1780993676.275:9080): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd6c710830 a2=90 a3=9500000000 items=0 ppid=57153 pid=57154 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993676.275:9080): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323531663133663838343762346265306234346532313632636565343131
type=BPF msg=audit(1780993676.315:9081): prog-id=435 op=LOAD
type=SYSCALL msg=audit(1780993676.315:9081): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffee300ce60 a2=90 a3=9500000000 items=0 ppid=57163 pid=57164 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993676.315:9081): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616332663431656165626435303334396235656132323064646663656631
type=BPF msg=audit(1780993676.348:9082): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993676.358:9083): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993676.433:9084): prog-id=436 op=LOAD
type=SYSCALL msg=audit(1780993676.433:9084): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdcd776600 a2=90 a3=9500000000 items=0 ppid=57215 pid=57216 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993676.433:9084): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363735326233323464316437346461353730323538366464663231613262
type=BPF msg=audit(1780993680.237:9085): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993680.289:9086): pid=56923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=56952 suid=74 rport=55028 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993680.290:9087): pid=56923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=56952 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993680.290:9088): pid=56923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993680.291:9089): pid=56923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=56923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993680.291:9090): pid=56923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993681.632:9091): pid=57985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=57985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993681.633:9092): pid=57930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=57985 suid=74 rport=32838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993681.633:9093): pid=57930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=57985 suid=74 rport=32838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993682.184:9094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993682.479:9095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993684.793:9096): pid=57930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=57985 suid=74 rport=32838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993684.794:9097): pid=57930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=57985 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993684.795:9098): pid=57930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993684.795:9099): pid=57930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=57930 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993684.795:9100): pid=57930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1780993685.475:9101): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993686.014:9102): prog-id=437 op=LOAD
type=SYSCALL msg=audit(1780993686.014:9102): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd30aab330 a2=90 a3=9500000000 items=0 ppid=58584 pid=58585 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993686.014:9102): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316439336631313839663136323533316563353762353239373734656334
type=SERVICE_START msg=audit(1780993686.076:9103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993686.206:9104): pid=58640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=58640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993686.208:9105): pid=58484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=58640 suid=74 rport=32854 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993686.208:9106): pid=58484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=58640 suid=74 rport=32854 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780993686.230:9107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993686.324:9108): pid=56950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993686.325:9109): pid=56950 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993686.329:9110): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993686.329:9111): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993686.480:9112): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993686.480:9113): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993686.543:9114): pid=58669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993686.543:9115): pid=58669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64626D68736676716A7A637174766E6B647A6270636B676D79697375786B706C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993686.544:9116): pid=58669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993686.548:9117): pid=58669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993686.745:9118): pid=58669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993686.746:9119): pid=58669 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993686.751:9120): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993686.751:9121): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993686.771:9122): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993686.771:9123): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993686.815:9124): pid=58685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993686.815:9125): pid=58685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64626A6A65727270646F667975696E6675716A65696D7667656466646863706E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993686.815:9126): pid=58685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993686.817:9127): pid=58685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993686.960:9128): pid=58685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993686.960:9129): pid=58685 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993686.963:9130): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993686.963:9131): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993686.978:9132): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993686.978:9133): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993687.006:9134): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993687.006:9135): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993687.023:9136): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993687.023:9137): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993687.055:9138): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993687.055:9139): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993687.246:9140): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993687.246:9141): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993687.284:9142): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993687.284:9143): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993687.308:9144): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993687.308:9145): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993687.365:9146): pid=58807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993687.365:9147): pid=58807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6978646E6E68666B766B64626B65796162696F6663696D756368777178727A66203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993687.366:9148): pid=58807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993687.368:9149): pid=58807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993687.543:9150): pid=58807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993687.543:9151): pid=58807 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993687.547:9152): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993687.547:9153): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993687.567:9154): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993687.567:9155): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993687.630:9156): pid=58823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993687.630:9157): pid=58823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78777679786B67776F77736D75666C75757069776F6E68776A78667874776571203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993687.631:9158): pid=58823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993687.634:9159): pid=58823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993688.161:9160): prog-id=438 op=LOAD
type=BPF msg=audit(1780993688.161:9161): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993688.172:9162): prog-id=439 op=LOAD
type=BPF msg=audit(1780993688.172:9163): prog-id=440 op=LOAD
type=BPF msg=audit(1780993688.172:9164): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993688.172:9165): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993688.175:9166): prog-id=441 op=LOAD
type=BPF msg=audit(1780993688.175:9167): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993688.178:9168): prog-id=442 op=LOAD
type=BPF msg=audit(1780993688.178:9169): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993688.178:9170): prog-id=443 op=LOAD
type=BPF msg=audit(1780993688.178:9171): prog-id=444 op=LOAD
type=BPF msg=audit(1780993688.178:9172): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993688.178:9173): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993688.178:9174): prog-id=445 op=LOAD
type=BPF msg=audit(1780993688.178:9175): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993688.178:9176): prog-id=446 op=LOAD
type=BPF msg=audit(1780993688.178:9177): prog-id=447 op=LOAD
type=BPF msg=audit(1780993688.178:9178): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993688.178:9179): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993688.213:9180): pid=58823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993688.213:9181): pid=58823 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993688.218:9182): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993688.218:9183): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993688.426:9184): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993688.427:9185): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993688.488:9186): pid=58882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993688.488:9187): pid=58882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6561797574766F6A7171706E7A68696663746766646A7A686565726B676875203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993688.489:9188): pid=58882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993688.493:9189): pid=58882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993689.043:9190): prog-id=448 op=LOAD
type=BPF msg=audit(1780993689.043:9191): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993689.056:9192): prog-id=449 op=LOAD
type=BPF msg=audit(1780993689.056:9193): prog-id=450 op=LOAD
type=BPF msg=audit(1780993689.056:9194): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993689.056:9195): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993689.059:9196): prog-id=451 op=LOAD
type=BPF msg=audit(1780993689.059:9197): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993689.062:9198): prog-id=452 op=LOAD
type=BPF msg=audit(1780993689.062:9199): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993689.062:9200): prog-id=453 op=LOAD
type=BPF msg=audit(1780993689.062:9201): prog-id=454 op=LOAD
type=BPF msg=audit(1780993689.062:9202): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993689.062:9203): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993689.062:9204): prog-id=455 op=LOAD
type=BPF msg=audit(1780993689.062:9205): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993689.062:9206): prog-id=456 op=LOAD
type=BPF msg=audit(1780993689.062:9207): prog-id=457 op=LOAD
type=BPF msg=audit(1780993689.062:9208): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993689.062:9209): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993689.157:9210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_clustercheck comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993689.186:9211): pid=58882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993689.186:9212): pid=58882 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993689.190:9213): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993689.190:9214): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993689.225:9215): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993689.225:9216): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993689.258:9217): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993689.258:9218): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993689.384:9219): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993689.384:9220): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993689.440:9221): pid=58970 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993689.441:9222): pid=58970 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61797979657464697A786A656F73756F6C656B7A6C757061756A6D657A6B766C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993689.442:9223): pid=58970 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993689.446:9224): pid=58970 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993689.496:9225): pid=58484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=58640 suid=74 rport=32854 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993689.497:9226): pid=58484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=58640 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993689.498:9227): pid=58484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993689.498:9228): pid=58484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=58484 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993689.498:9229): pid=58484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993689.602:9230): pid=58970 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993689.602:9231): pid=58970 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993689.606:9232): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993689.606:9233): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993689.889:9234): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993689.889:9235): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993689.920:9236): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993689.920:9237): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993689.942:9238): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993689.942:9239): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993689.976:9240): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993689.976:9241): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993690.001:9242): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993690.001:9243): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993690.060:9244): pid=59019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993690.061:9245): pid=59019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646472746E7377776469796C706B7A65756B6F746C696F70737774616A6D6167203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993690.062:9246): pid=59019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993690.066:9247): pid=59019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993690.237:9248): pid=59019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993690.238:9249): pid=59019 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993690.241:9250): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993690.241:9251): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993690.267:9252): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993690.267:9253): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993690.305:9254): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993690.305:9255): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993690.323:9256): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993690.323:9257): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993690.355:9258): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993690.355:9259): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993690.374:9260): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993690.374:9261): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993690.418:9262): pid=59072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=59072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993690.420:9263): pid=58973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=59072 suid=74 rport=42784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993690.420:9264): pid=58973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=59072 suid=74 rport=42784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1780993690.431:9265): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993690.431:9266): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69766E696371786779736B65726C6F776E72696C70737A73756C756762656962203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993690.432:9267): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993690.436:9268): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993690.609:9269): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993690.610:9270): pid=59070 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993690.614:9271): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993690.614:9272): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993690.632:9273): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993690.632:9274): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993690.656:9275): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993690.656:9276): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993690.767:9277): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993690.767:9278): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993690.833:9279): pid=59101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993690.833:9280): pid=59101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6B756C797870696F797964756678716567686A70636C766C76676E6D6A6575203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993690.834:9281): pid=59101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993690.837:9282): pid=59101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993691.019:9283): pid=59101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993691.019:9284): pid=59101 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993691.023:9285): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993691.023:9286): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993691.310:9287): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993691.310:9288): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993691.374:9289): pid=59137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993691.374:9290): pid=59137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A696E776872647171727274726B70777979766F75726466736D7971666A7874203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993691.375:9291): pid=59137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993691.378:9292): pid=59137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993691.557:9293): pid=59137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993691.557:9294): pid=59137 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993691.561:9295): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993691.561:9296): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993691.657:9297): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993691.657:9298): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993691.723:9299): pid=59190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993691.723:9300): pid=59190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72666B746D617664696D6B626A6C6D706F617A6C626B617362626E7A7863716C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993691.725:9301): pid=59190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993691.728:9302): pid=59190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993691.919:9303): pid=59190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993691.920:9304): pid=59190 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993691.924:9305): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993691.924:9306): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993692.515:9307): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993692.515:9308): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993692.544:9309): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993692.544:9310): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993692.566:9311): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993692.566:9312): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993692.603:9313): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993692.603:9314): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993692.619:9315): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993692.619:9316): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993692.683:9317): pid=59307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993692.683:9318): pid=59307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656675656F666165756C6F737771726B68666565767A7674786E72746A767976203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993692.685:9319): pid=59307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993692.686:9320): pid=59307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993692.856:9321): pid=59307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993692.856:9322): pid=59307 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993692.858:9323): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993692.858:9324): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993692.882:9325): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993692.882:9326): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993692.910:9327): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993692.910:9328): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993692.932:9329): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993692.932:9330): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993692.951:9331): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993692.951:9332): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993692.976:9333): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993692.976:9334): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993693.030:9335): pid=59408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993693.032:9336): pid=59408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B75616F7361777A7471636F6E676E797A7278726A7A686F64657A7A76667868203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993693.032:9337): pid=59408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993693.035:9338): pid=59408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993693.173:9339): pid=59408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993693.173:9340): pid=59408 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993693.176:9341): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993693.176:9342): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993693.193:9343): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993693.193:9344): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993693.216:9345): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993693.216:9346): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993693.432:9347): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993693.432:9348): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993693.497:9349): pid=59546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993693.497:9350): pid=59546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61776F6C6D6F6A71766E6B736A7A767970636767677973706878756B68636268203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993693.498:9351): pid=59546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993693.501:9352): pid=59546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993693.682:9353): pid=59546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993693.682:9354): pid=59546 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993693.687:9355): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993693.687:9356): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993693.903:9357): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993693.903:9358): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993693.930:9359): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993693.930:9360): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993693.951:9361): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993693.951:9362): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993693.986:9363): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993693.986:9364): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993694.012:9365): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993694.013:9366): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993694.073:9367): pid=59671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993694.074:9368): pid=59671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7577637875726569766774727567616668677179796D6763716C6E636B747373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993694.074:9369): pid=59671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993694.077:9370): pid=59671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993694.281:9371): pid=59671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993694.282:9372): pid=59671 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993694.285:9373): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993694.285:9374): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993694.305:9375): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993694.305:9376): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993694.358:9377): pid=59738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993694.358:9378): pid=59738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F646C677863717070726D6B766C6863697577776B6F756D79676F6862796B72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993694.359:9379): pid=59738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993694.361:9380): pid=59738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993694.541:9381): pid=59738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993694.542:9382): pid=59738 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993694.547:9383): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993694.547:9384): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993694.572:9385): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993694.572:9386): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993694.597:9387): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993694.597:9388): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993694.711:9389): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993694.711:9390): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993694.735:9391): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993694.735:9392): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993694.758:9393): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993694.758:9394): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993694.792:9395): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993694.792:9396): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993694.826:9397): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993694.826:9398): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993694.861:9399): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993694.861:9400): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993694.885:9401): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993694.885:9402): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993694.923:9403): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993694.923:9404): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993694.942:9405): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993694.942:9406): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993694.975:9407): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993694.975:9408): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993694.999:9409): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993695.000:9410): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993695.067:9411): pid=59842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993695.068:9412): pid=59842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993695.068:9413): pid=59842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993695.070:9414): pid=59842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993695.264:9415): pid=59842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993695.264:9416): pid=59842 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993695.268:9417): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993695.268:9418): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993695.361:9419): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993695.361:9420): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993695.402:9421): pid=59871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993695.403:9422): pid=59871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726E73726D786372797171707573786174707262716B79727A6672686E6B706C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993695.404:9423): pid=59871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993695.407:9424): pid=59871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993695.541:9425): pid=58973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=59072 suid=74 rport=42784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993695.542:9426): pid=58973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=59072 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993695.542:9427): pid=58973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993695.542:9428): pid=58973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=58973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993695.542:9429): pid=58973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993695.580:9430): pid=59871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993695.580:9431): pid=59871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993695.583:9432): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993695.583:9433): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993697.456:9434): pid=59986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=59986 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993697.457:9435): pid=59877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=59986 suid=74 rport=42798 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993697.457:9436): pid=59877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=59986 suid=74 rport=42798 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993700.688:9437): pid=59877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=59986 suid=74 rport=42798 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993700.688:9438): pid=59877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=59986 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993700.689:9439): pid=59877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993700.690:9440): pid=59877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=59877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993700.690:9441): pid=59877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993701.802:9442): pid=60137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=60137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993701.803:9443): pid=60110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=60137 suid=74 rport=56288 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993701.803:9444): pid=60110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=60137 suid=74 rport=56288 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993704.671:9445): pid=60110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=60137 suid=74 rport=56288 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993704.672:9446): pid=60110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=60137 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993704.672:9447): pid=60110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993704.673:9448): pid=60110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=60110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993704.673:9449): pid=60110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993705.270:9450): pid=60511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=60511 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993705.271:9451): pid=60450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=60511 suid=74 rport=56290 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993705.271:9452): pid=60450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=60511 suid=74 rport=56290 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993705.640:9453): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993705.640:9454): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993705.696:9455): pid=60592 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993705.696:9456): pid=60592 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6D6B6375697078726C6D786E73706574787A6E616668786561716276726976203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993705.697:9457): pid=60592 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993705.700:9458): pid=60592 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993705.886:9459): pid=60592 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993705.887:9460): pid=60592 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993705.891:9461): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993705.891:9462): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993708.873:9463): pid=60450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=60511 suid=74 rport=56290 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993708.874:9464): pid=60450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=60511 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993708.874:9465): pid=60450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993708.875:9466): pid=60450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=60450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993708.875:9467): pid=60450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993709.632:9468): pid=60742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=60742 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993709.633:9469): pid=60734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=60742 suid=74 rport=56304 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993709.633:9470): pid=60734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=60742 suid=74 rport=56304 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993713.188:9471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993713.414:9472): pid=60734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=60742 suid=74 rport=56304 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993713.415:9473): pid=60734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=60742 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993713.415:9474): pid=60734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993713.415:9475): pid=60734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=60734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993713.415:9476): pid=60734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993713.532:9477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993715.317:9478): pid=61021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=61021 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993715.318:9479): pid=60926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=61021 suid=74 rport=48704 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993715.318:9480): pid=60926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=61021 suid=74 rport=48704 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993715.958:9481): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993715.958:9482): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993716.003:9483): pid=61043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993716.003:9484): pid=61043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E786F75687466666C66676D636B676C6F6D7A66766F64686771677073656866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993716.004:9485): pid=61043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993716.008:9486): pid=61043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993716.157:9487): pid=61043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993716.158:9488): pid=61043 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993716.162:9489): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993716.162:9490): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1780993716.283:9491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993716.432:9492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993716.566:9493): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993716.566:9494): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993716.611:9495): pid=61197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993716.611:9496): pid=61197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64706A726E756E6968796376676274636C767765776D716F726E68796B627579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993716.611:9497): pid=61197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993716.614:9498): pid=61197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993716.759:9499): pid=61197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993716.760:9500): pid=61197 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993716.764:9501): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993716.764:9502): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993716.853:9503): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993716.853:9504): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993716.916:9505): pid=61221 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993716.917:9506): pid=61221 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666D696A6A7A6D626465736E626D6D746F746D616E797671736F6E7065757178203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993716.917:9507): pid=61221 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993716.920:9508): pid=61221 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993717.111:9509): pid=61221 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993717.111:9510): pid=61221 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993717.114:9511): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993717.114:9512): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993717.278:9513): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993717.278:9514): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993717.307:9515): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993717.307:9516): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993717.327:9517): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993717.328:9518): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993717.359:9519): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993717.360:9520): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993717.385:9521): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993717.385:9522): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993717.446:9523): pid=61373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993717.446:9524): pid=61373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E6962756F7467766C7167667061637A6E626867656B636B7564646A646F75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993717.446:9525): pid=61373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993717.449:9526): pid=61373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993717.608:9527): pid=61373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993717.608:9528): pid=61373 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993717.612:9529): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993717.612:9530): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993717.630:9531): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993717.630:9532): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993717.677:9533): pid=61407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993717.677:9534): pid=61407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A726270736B657970766C70626A70726F707A7075776570736A6D6A767A6263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993717.678:9535): pid=61407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993717.681:9536): pid=61407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993717.862:9537): pid=61407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993717.862:9538): pid=61407 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993717.866:9539): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993717.866:9540): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993717.896:9541): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993717.896:9542): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993717.917:9543): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993717.918:9544): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993717.993:9545): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993717.993:9546): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993718.054:9547): pid=61490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993718.054:9548): pid=61490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696765786B637A7A6B76746969627767716B7468616E6E676A757371666B7965203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993718.055:9549): pid=61490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993718.058:9550): pid=61490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993718.223:9551): pid=61490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993718.224:9552): pid=61490 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993718.229:9553): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993718.229:9554): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993718.341:9555): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993718.342:9556): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993718.392:9557): pid=61512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993718.393:9558): pid=61512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D76627962736F7A71687564716E6C6A66757673626D637172706B757A676665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993718.394:9559): pid=61512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993718.396:9560): pid=61512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993718.497:9561): pid=60926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=61021 suid=74 rport=48704 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993718.497:9562): pid=60926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=61021 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993718.498:9563): pid=60926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993718.498:9564): pid=60926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=60926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993718.498:9565): pid=60926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993718.855:9566): pid=61512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993718.855:9567): pid=61512 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993718.859:9568): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993718.859:9569): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993718.986:9570): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993718.986:9571): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993719.026:9572): pid=61668 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993719.026:9573): pid=61668 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707473667668676B646E616470677263796665676E70756E62676A746D78716C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993719.026:9574): pid=61668 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993719.029:9575): pid=61668 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993719.240:9576): pid=61668 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993719.241:9577): pid=61668 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993719.245:9578): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993719.245:9579): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993719.591:9580): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993719.591:9581): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993719.651:9582): pid=61691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993719.652:9583): pid=61691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7866657565696870716264657A63666E766E6C776B6B6D6765726D7462656567203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993719.653:9584): pid=61691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993719.655:9585): pid=61691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993719.840:9586): pid=61691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993719.841:9587): pid=61691 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993719.844:9588): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993719.844:9589): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993719.966:9590): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993719.966:9591): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993720.031:9592): pid=61715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993720.031:9593): pid=61715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A736971676A696974706B737A706D6A7975676D63656F656578666574656E76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993720.031:9594): pid=61715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993720.035:9595): pid=61715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993720.212:9596): pid=61715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993720.212:9597): pid=61715 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993720.216:9598): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993720.216:9599): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993720.472:9600): pid=61718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=61718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993720.473:9601): pid=61606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=61718 suid=74 rport=48712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993720.473:9602): pid=61606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=61718 suid=74 rport=48712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993720.474:9603): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993720.474:9604): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993720.534:9605): pid=61732 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993720.534:9606): pid=61732 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B667765726C69737A736A7A6C78666F6C6F79706C777263756C67776B637666203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993720.535:9607): pid=61732 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993720.538:9608): pid=61732 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993720.717:9609): pid=61732 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993720.717:9610): pid=61732 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993720.721:9611): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993720.721:9612): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993720.905:9613): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993720.905:9614): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993720.934:9615): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993720.934:9616): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993720.952:9617): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993720.952:9618): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993720.984:9619): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993720.984:9620): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993721.005:9621): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993721.005:9622): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993721.065:9623): pid=61790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993721.066:9624): pid=61790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6B636B7863776D766562636271766A7775787768646B6668617864746A786B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993721.066:9625): pid=61790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993721.069:9626): pid=61790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993721.240:9627): pid=61790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993721.241:9628): pid=61790 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993721.244:9629): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993721.244:9630): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993721.269:9631): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993721.269:9632): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993721.327:9633): pid=61808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993721.327:9634): pid=61808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F696B6D697A6E617A73656E6665636A616F6C7176737473656A64626E78737A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993721.328:9635): pid=61808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993721.331:9636): pid=61808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993721.517:9637): pid=61808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993721.517:9638): pid=61808 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993721.521:9639): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993721.521:9640): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993721.545:9641): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993721.545:9642): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993721.576:9643): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993721.576:9644): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993721.637:9645): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993721.637:9646): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993721.671:9647): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993721.671:9648): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993721.693:9649): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993721.693:9650): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993721.730:9651): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993721.730:9652): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993721.790:9653): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993721.790:9654): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993721.849:9655): pid=61870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993721.850:9656): pid=61870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6474726F6B6E706963727475696466636F74647A767278716C7973736764756C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993721.851:9657): pid=61870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993721.854:9658): pid=61870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993722.043:9659): pid=61870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993722.043:9660): pid=61870 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993722.047:9661): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993722.047:9662): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993722.073:9663): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993722.073:9664): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993722.114:9665): pid=61896 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993722.114:9666): pid=61896 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69666F687476797165627175787A79756977626673726C6668626A67706B636A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993722.114:9667): pid=61896 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993722.116:9668): pid=61896 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993722.304:9669): pid=61896 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993722.305:9670): pid=61896 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993722.308:9671): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993722.308:9672): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993722.327:9673): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993722.327:9674): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993722.353:9675): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993722.353:9676): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993722.462:9677): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993722.462:9678): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993722.493:9679): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993722.493:9680): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993722.516:9681): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993722.516:9682): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993722.553:9683): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993722.553:9684): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993722.578:9685): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993722.578:9686): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993722.642:9687): pid=61958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993722.642:9688): pid=61958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70626D616B636769716C68627777637570636172767864786A6172667866636E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993722.643:9689): pid=61958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993722.645:9690): pid=61958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993722.844:9691): pid=61958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993722.845:9692): pid=61958 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993722.848:9693): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993722.848:9694): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993722.865:9695): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993722.865:9696): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993722.914:9697): pid=61976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993722.915:9698): pid=61976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73617569736D676F716C647970656778726E6E786C766C7270746D7869666D65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993722.915:9699): pid=61976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993722.918:9700): pid=61976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993723.076:9701): pid=61976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993723.076:9702): pid=61976 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993723.079:9703): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993723.080:9704): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993723.100:9705): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993723.100:9706): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993723.134:9707): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993723.134:9708): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993723.230:9709): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993723.230:9710): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993723.263:9711): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993723.263:9712): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993723.277:9713): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993723.277:9714): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993723.308:9715): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993723.308:9716): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993723.327:9717): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993723.327:9718): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993723.390:9719): pid=62128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993723.390:9720): pid=62128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78686D6572676269726E657661666762727A66716B79656B706467646E6F6666203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993723.392:9721): pid=62128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993723.398:9722): pid=62128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993723.574:9723): pid=62128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993723.575:9724): pid=62128 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993723.579:9725): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993723.579:9726): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993723.603:9727): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993723.603:9728): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993723.671:9729): pid=62148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993723.672:9730): pid=62148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616B746E76727A747279706B6E77747866756B64726F656D6E707273677A7874203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993723.672:9731): pid=62148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993723.675:9732): pid=62148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993723.817:9733): pid=61606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=61718 suid=74 rport=48712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993723.818:9734): pid=61606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=61718 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993723.819:9735): pid=61606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993723.819:9736): pid=61606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=61606 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993723.820:9737): pid=61606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993723.851:9738): pid=62148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993723.851:9739): pid=62148 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993723.855:9740): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993723.855:9741): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993723.879:9742): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993723.879:9743): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993723.910:9744): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993723.910:9745): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993724.003:9746): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993724.003:9747): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993724.059:9748): pid=62267 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993724.059:9749): pid=62267 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786170787974716474726D78616F6579617469766E7365676D666C67766B7670203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993724.059:9750): pid=62267 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993724.061:9751): pid=62267 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993724.268:9752): pid=62270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=62270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993724.270:9753): pid=62244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=62270 suid=74 rport=49906 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993724.270:9754): pid=62244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=62270 suid=74 rport=49906 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1780993724.563:9755): prog-id=458 op=LOAD
type=BPF msg=audit(1780993724.563:9756): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993724.573:9757): prog-id=459 op=LOAD
type=BPF msg=audit(1780993724.573:9758): prog-id=460 op=LOAD
type=BPF msg=audit(1780993724.573:9759): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993724.573:9760): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993724.577:9761): prog-id=461 op=LOAD
type=BPF msg=audit(1780993724.577:9762): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993724.580:9763): prog-id=462 op=LOAD
type=BPF msg=audit(1780993724.580:9764): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993724.580:9765): prog-id=463 op=LOAD
type=BPF msg=audit(1780993724.580:9766): prog-id=464 op=LOAD
type=BPF msg=audit(1780993724.580:9767): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993724.580:9768): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993724.580:9769): prog-id=465 op=LOAD
type=BPF msg=audit(1780993724.580:9770): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993724.581:9771): prog-id=466 op=LOAD
type=BPF msg=audit(1780993724.581:9772): prog-id=467 op=LOAD
type=BPF msg=audit(1780993724.581:9773): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993724.581:9774): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993724.644:9775): pid=62267 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993724.644:9776): pid=62267 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993724.649:9777): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993724.649:9778): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993724.769:9779): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993724.769:9780): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993724.802:9781): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993724.802:9782): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993724.828:9783): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993724.828:9784): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993724.867:9785): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993724.867:9786): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993724.895:9787): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993724.895:9788): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993724.951:9789): pid=62396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993724.951:9790): pid=62396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756B657474666C6F6C75666D757674706D66616F6B746C716769666577796975203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993724.952:9791): pid=62396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993724.957:9792): pid=62396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993725.143:9793): pid=62396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993725.144:9794): pid=62396 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993725.148:9795): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993725.148:9796): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993725.172:9797): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993725.173:9798): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993725.232:9799): pid=62422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993725.232:9800): pid=62422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B6F6663686162697A6C7361686D6C666E62727079656F77647A6665687472203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993725.233:9801): pid=62422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993725.237:9802): pid=62422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993725.425:9803): pid=62422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993725.425:9804): pid=62422 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993725.429:9805): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993725.429:9806): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993725.448:9807): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993725.448:9808): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993725.474:9809): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993725.475:9810): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993725.573:9811): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993725.573:9812): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993725.606:9813): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993725.606:9814): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993725.627:9815): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993725.627:9816): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993725.661:9817): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993725.661:9818): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993725.684:9819): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993725.684:9820): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993725.742:9821): pid=62484 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993725.743:9822): pid=62484 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767273756B7077637474746D6E796F636C777564646565727279636265666573203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993725.743:9823): pid=62484 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993725.745:9824): pid=62484 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993725.940:9825): pid=62484 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993725.940:9826): pid=62484 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993725.943:9827): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993725.943:9828): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993725.967:9829): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993725.968:9830): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993726.013:9831): pid=62506 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993726.013:9832): pid=62506 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697978676D67667768676E697A6A726F6A71637367656E776C79726C7A6C766B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993726.013:9833): pid=62506 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993726.015:9834): pid=62506 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993726.176:9835): pid=62506 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993726.176:9836): pid=62506 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993726.180:9837): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993726.180:9838): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993726.198:9839): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993726.198:9840): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993726.227:9841): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993726.227:9842): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993726.310:9843): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993726.310:9844): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993726.366:9845): pid=62540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993726.366:9846): pid=62540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756F6E6374616B7876626E666A6B757A707A6D76656B66667A756376666D6F70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993726.368:9847): pid=62540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993726.371:9848): pid=62540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993726.828:9849): prog-id=468 op=LOAD
type=BPF msg=audit(1780993726.828:9850): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993726.837:9851): prog-id=469 op=LOAD
type=BPF msg=audit(1780993726.838:9852): prog-id=470 op=LOAD
type=BPF msg=audit(1780993726.838:9853): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993726.838:9854): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993726.840:9855): prog-id=471 op=LOAD
type=BPF msg=audit(1780993726.841:9856): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993726.843:9857): prog-id=472 op=LOAD
type=BPF msg=audit(1780993726.843:9858): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993726.843:9859): prog-id=473 op=LOAD
type=BPF msg=audit(1780993726.843:9860): prog-id=474 op=LOAD
type=BPF msg=audit(1780993726.843:9861): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993726.843:9862): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993726.844:9863): prog-id=475 op=LOAD
type=BPF msg=audit(1780993726.844:9864): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993726.844:9865): prog-id=476 op=LOAD
type=BPF msg=audit(1780993726.844:9866): prog-id=477 op=LOAD
type=BPF msg=audit(1780993726.844:9867): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993726.844:9868): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993726.923:9869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993726.923:9870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993726.943:9871): pid=62540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993726.943:9872): pid=62540 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993726.947:9873): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993726.947:9874): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993727.080:9875): pid=62244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=62270 suid=74 rport=49906 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993727.081:9876): pid=62244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=62270 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993727.081:9877): pid=62244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993727.082:9878): pid=62244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=62244 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993727.082:9879): pid=62244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993727.140:9880): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993727.140:9881): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993727.188:9882): pid=62606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993727.189:9883): pid=62606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6571777A65707475757362656362666C69746E70776B746B6868616E656A6F76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993727.190:9884): pid=62606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993727.194:9885): pid=62606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993727.364:9886): pid=62606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993727.364:9887): pid=62606 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993727.368:9888): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993727.368:9889): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993727.584:9890): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993727.584:9891): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993727.648:9892): pid=62676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993727.648:9893): pid=62676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6861656B65737176716C7861786A6561746D7A716D6279736866716374656E64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993727.649:9894): pid=62676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993727.651:9895): pid=62676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993728.035:9896): pid=62710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=62710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993728.037:9897): pid=62609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=62710 suid=74 rport=49922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993728.037:9898): pid=62609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=62710 suid=74 rport=49922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993728.104:9899): pid=62676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993728.105:9900): pid=62676 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993728.109:9901): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993728.109:9902): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993728.830:9903): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993728.830:9904): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993728.874:9905): pid=62730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993728.874:9906): pid=62730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7A677276787263756B69627274796B65796A7863777164757A656B6B7A756F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993728.875:9907): pid=62730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993728.877:9908): pid=62730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993729.434:9909): prog-id=478 op=LOAD
type=SYSCALL msg=audit(1780993729.434:9909): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffede5721d0 a2=90 a3=9500000000 items=0 ppid=62845 pid=62846 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993729.434:9909): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366635383035633562653233653161333936356339313335396364666332
type=BPF msg=audit(1780993729.448:9910): prog-id=479 op=LOAD
type=SYSCALL msg=audit(1780993729.448:9910): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdddf98fd0 a2=90 a3=9500000001 items=0 ppid=62849 pid=62850 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993729.448:9910): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663032643162656230386638376638376364353537623037373231386431
type=USER_ACCT msg=audit(1780993729.484:9911): pid=62859 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993729.484:9912): pid=62859 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993729.484:9913): pid=62859 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1780993729.485:9914): pid=62859 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993729.498:9915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993729.526:9916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993729.566:9917): pid=62879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993729.567:9918): pid=62859 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_ACQ msg=audit(1780993729.567:9919): pid=62879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780993729.567:9920): pid=62859 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_ROLE_CHANGE msg=audit(1780993729.567:9921): pid=62879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780993729.568:9922): pid=62879 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=15 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780993729.568:9922): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd7a6b5f80 a2=1 a3=0 items=0 ppid=1 pid=62879 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993729.568:9922): proctitle="(systemd)"
type=USER_START msg=audit(1780993729.571:9923): pid=62879 uid=0 auid=0 ses=15 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1780993729.592:9924): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993729.593:9925): prog-id=480 op=LOAD
type=SYSCALL msg=audit(1780993729.593:9925): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd803c2480 a2=90 a3=0 items=0 ppid=1 pid=62879 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993729.593:9925): proctitle="(systemd)"
type=BPF msg=audit(1780993729.594:9926): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993729.594:9927): prog-id=481 op=LOAD
type=SYSCALL msg=audit(1780993729.594:9927): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd803c2520 a2=90 a3=4 items=0 ppid=1 pid=62879 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993729.594:9927): proctitle="(systemd)"
type=BPF msg=audit(1780993729.594:9928): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1780993729.681:9929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993729.711:9930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993730.021:9931): prog-id=482 op=LOAD
type=SYSCALL msg=audit(1780993730.021:9931): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd98241f90 a2=90 a3=9500000001 items=0 ppid=63063 pid=63064 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993730.021:9931): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633239353233613865336363346437636431333133353038356238646462
type=USER_ACCT msg=audit(1780993730.063:9932): pid=63069 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993730.063:9933): pid=63069 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993730.064:9934): pid=63069 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993730.082:9935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780993730.102:9936): pid=63069 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1780993730.155:9937): pid=63069 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993730.155:9938): pid=63069 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993730.230:9939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993730.682:9940): prog-id=483 op=LOAD
type=SYSCALL msg=audit(1780993730.682:9940): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc7b2056d0 a2=90 a3=9500000000 items=0 ppid=63244 pid=63245 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993730.682:9940): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F396339353232626339323433616139653330383461643230653230633035
type=CRYPTO_KEY_USER msg=audit(1780993730.742:9941): pid=62609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=62710 suid=74 rport=49922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993730.744:9942): pid=62609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=62710 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993730.744:9943): pid=62609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993730.745:9944): pid=62609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=62609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993730.745:9945): pid=62609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993730.758:9946): pid=63249 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993730.758:9947): pid=63249 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993730.759:9948): pid=63249 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1780993730.761:9949): pid=63249 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1780993730.837:9950): pid=63249 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993730.838:9951): pid=63249 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_AUTH msg=audit(1780993730.992:9952): pid=63277 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='op=PAM:authentication grantors=pam_rootok acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_ACCT msg=audit(1780993730.992:9953): pid=63277 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='op=PAM:accounting grantors=pam_succeed_if acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_ACQ msg=audit(1780993730.993:9954): pid=63277 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='op=PAM:setcred grantors=pam_rootok acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1780993730.994:9955): pid=63277 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_xauth acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993732.391:9956): pid=63341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=63341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993732.393:9957): pid=63320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=63341 suid=74 rport=51418 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993732.393:9958): pid=63320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=63341 suid=74 rport=51418 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993735.863:9959): pid=63320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=63341 suid=74 rport=51418 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993735.863:9960): pid=63320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=63341 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993735.864:9961): pid=63320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993735.865:9962): pid=63320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=63320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993735.865:9963): pid=63320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993736.780:9964): pid=63587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=63587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993736.782:9965): pid=63578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=63587 suid=74 rport=51428 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993736.782:9966): pid=63578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=63587 suid=74 rport=51428 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993737.717:9967): pid=63277 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_xauth acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993737.717:9968): pid=63277 uid=0 auid=1002 ses=13 subj=system_u:system_r:container_t:s0:c491,c518 msg='op=PAM:setcred grantors=pam_rootok acct="nova" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1780993737.742:9969): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993738.019:9970): pid=62730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993738.019:9971): pid=62730 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993738.024:9972): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993738.024:9973): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993738.176:9974): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993738.176:9975): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993738.244:9976): pid=63701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993738.244:9977): pid=63701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747079667174706D7978796F6E74746A747170646E6D746F6C6478746B6C6374203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993738.246:9978): pid=63701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993738.252:9979): pid=63701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993738.429:9980): pid=63701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993738.429:9981): pid=63701 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993738.433:9982): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993738.433:9983): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993738.453:9984): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993738.453:9985): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993738.513:9986): pid=63725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993738.513:9987): pid=63725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D626F7478696268756F68717665716F6A7864787768776D6977776D6A6B7862203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993738.514:9988): pid=63725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993738.517:9989): pid=63725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993738.689:9990): pid=63725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993738.689:9991): pid=63725 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993738.693:9992): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993738.693:9993): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993738.716:9994): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993738.716:9995): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993738.767:9996): pid=63743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993738.767:9997): pid=63743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66756E7768776D666462686B657A6A7A676C767178657265696E7A646B757A7A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993738.768:9998): pid=63743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993738.770:9999): pid=63743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993738.965:10000): pid=63743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993738.965:10001): pid=63743 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993738.969:10002): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993738.969:10003): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993738.993:10004): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993738.993:10005): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993739.045:10006): pid=63759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993739.045:10007): pid=63759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71626E6F786A67676D746D657175706763656B77777A6C72636D6C6961736461203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993739.046:10008): pid=63759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993739.049:10009): pid=63759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993739.192:10010): pid=63759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993739.192:10011): pid=63759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993739.196:10012): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993739.196:10013): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993739.217:10014): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993739.217:10015): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993739.275:10016): pid=63775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993739.275:10017): pid=63775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64646669777674736462666C6876646E62617565746875696469676763777467203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993739.275:10018): pid=63775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993739.277:10019): pid=63775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993739.441:10020): pid=63775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993739.442:10021): pid=63775 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993739.445:10022): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993739.445:10023): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993739.462:10024): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993739.462:10025): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993739.507:10026): pid=63799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993739.508:10027): pid=63799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666572677366787A6D6C7A706F69706B6A6D62616C726F696669666C67656E7A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993739.508:10028): pid=63799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993739.510:10029): pid=63799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993739.636:10030): pid=63799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993739.636:10031): pid=63799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993739.639:10032): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993739.639:10033): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993739.659:10034): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993739.659:10035): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993739.689:10036): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993739.689:10037): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993739.711:10038): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993739.711:10039): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993739.748:10040): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993739.748:10041): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993739.946:10042): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993739.946:10043): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993739.983:10044): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993739.983:10045): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993740.010:10046): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993740.010:10047): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993740.070:10048): pid=63860 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993740.070:10049): pid=63860 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A79736B797865657261656C736F6C686468736C6E687672666A70667A747762203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993740.072:10050): pid=63860 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993740.075:10051): pid=63860 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993740.174:10052): pid=63578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=63587 suid=74 rport=51428 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993740.174:10053): pid=63578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=63587 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993740.175:10054): pid=63578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993740.176:10055): pid=63578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=63578 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993740.176:10056): pid=63578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780993740.186:10057): pid=62897 uid=0 auid=0 ses=15 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1780993740.187:10058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993740.218:10059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993740.231:10060): pid=63860 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993740.232:10061): pid=63860 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993740.236:10062): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993740.236:10063): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993740.409:10064): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993740.409:10065): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993740.437:10066): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993740.437:10067): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993740.458:10068): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993740.458:10069): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993740.518:10070): pid=63899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993740.519:10071): pid=63899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736575766C6E647872786B636B6163736565786A766275766E66747174666D74203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993740.520:10072): pid=63899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993740.524:10073): pid=63899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993740.694:10074): pid=63899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993740.695:10075): pid=63899 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993740.698:10076): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993740.698:10077): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993740.798:10078): pid=63902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=63902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993740.799:10079): pid=63864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=63902 suid=74 rport=59648 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993740.799:10080): pid=63864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=63902 suid=74 rport=59648 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993740.897:10081): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993740.897:10082): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993740.930:10083): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993740.930:10084): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993740.958:10085): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993740.959:10086): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993741.016:10087): pid=63929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993741.016:10088): pid=63929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6677756675646973736E6F727477716B726B777877626C77736A61796B687A6C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993741.017:10089): pid=63929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993741.020:10090): pid=63929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993741.200:10091): pid=63929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993741.200:10092): pid=63929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993741.203:10093): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993741.203:10094): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993741.224:10095): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993741.224:10096): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993741.262:10097): pid=63945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993741.262:10098): pid=63945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78616B6C6179696279746B716E6A726C70766A786B766B6B77756F7863756E6E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993741.263:10099): pid=63945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993741.265:10100): pid=63945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993741.748:10101): prog-id=484 op=LOAD
type=BPF msg=audit(1780993741.748:10102): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993741.764:10103): prog-id=485 op=LOAD
type=BPF msg=audit(1780993741.764:10104): prog-id=486 op=LOAD
type=BPF msg=audit(1780993741.764:10105): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993741.764:10106): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993741.768:10107): prog-id=487 op=LOAD
type=BPF msg=audit(1780993741.768:10108): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993741.771:10109): prog-id=488 op=LOAD
type=BPF msg=audit(1780993741.771:10110): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993741.772:10111): prog-id=489 op=LOAD
type=BPF msg=audit(1780993741.772:10112): prog-id=490 op=LOAD
type=BPF msg=audit(1780993741.772:10113): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993741.772:10114): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993741.772:10115): prog-id=491 op=LOAD
type=BPF msg=audit(1780993741.772:10116): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993741.772:10117): prog-id=492 op=LOAD
type=BPF msg=audit(1780993741.772:10118): prog-id=493 op=LOAD
type=BPF msg=audit(1780993741.772:10119): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993741.772:10120): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993741.805:10121): pid=63945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993741.805:10122): pid=63945 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993741.809:10123): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993741.809:10124): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993742.030:10125): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993742.030:10126): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993742.098:10127): pid=64005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993742.098:10128): pid=64005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6B6D626E7462777A6D74707863756775727A6D6E76726C7472677866676863203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993742.100:10129): pid=64005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993742.105:10130): pid=64005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993742.623:10131): prog-id=494 op=LOAD
type=BPF msg=audit(1780993742.623:10132): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993742.633:10133): prog-id=495 op=LOAD
type=BPF msg=audit(1780993742.633:10134): prog-id=496 op=LOAD
type=BPF msg=audit(1780993742.633:10135): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993742.633:10136): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993742.636:10137): prog-id=497 op=LOAD
type=BPF msg=audit(1780993742.636:10138): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993742.639:10139): prog-id=498 op=LOAD
type=BPF msg=audit(1780993742.639:10140): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993742.639:10141): prog-id=499 op=LOAD
type=BPF msg=audit(1780993742.639:10142): prog-id=500 op=LOAD
type=BPF msg=audit(1780993742.639:10143): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993742.639:10144): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993742.639:10145): prog-id=501 op=LOAD
type=BPF msg=audit(1780993742.639:10146): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993742.639:10147): prog-id=502 op=LOAD
type=BPF msg=audit(1780993742.639:10148): prog-id=503 op=LOAD
type=BPF msg=audit(1780993742.639:10149): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993742.639:10150): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993742.747:10151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_collectd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993742.775:10152): pid=64005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993742.775:10153): pid=64005 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993742.779:10154): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993742.779:10155): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993742.969:10156): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993742.969:10157): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993743.014:10158): pid=64144 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993743.014:10159): pid=64144 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766A796D77647472697870716C6266616F7A7576676369696D796D7167707570203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993743.015:10160): pid=64144 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993743.019:10161): pid=64144 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993743.561:10162): prog-id=504 op=LOAD
type=BPF msg=audit(1780993743.561:10163): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993743.574:10164): prog-id=505 op=LOAD
type=BPF msg=audit(1780993743.574:10165): prog-id=506 op=LOAD
type=BPF msg=audit(1780993743.574:10166): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993743.574:10167): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993743.577:10168): prog-id=507 op=LOAD
type=BPF msg=audit(1780993743.577:10169): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993743.580:10170): prog-id=508 op=LOAD
type=BPF msg=audit(1780993743.580:10171): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993743.580:10172): prog-id=509 op=LOAD
type=BPF msg=audit(1780993743.580:10173): prog-id=510 op=LOAD
type=BPF msg=audit(1780993743.580:10174): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993743.580:10175): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993743.580:10176): prog-id=511 op=LOAD
type=BPF msg=audit(1780993743.580:10177): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993743.580:10178): prog-id=512 op=LOAD
type=BPF msg=audit(1780993743.580:10179): prog-id=513 op=LOAD
type=BPF msg=audit(1780993743.580:10180): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993743.580:10181): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993743.589:10182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993743.655:10183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993743.677:10184): pid=64144 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993743.678:10185): pid=64144 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993743.682:10186): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993743.682:10187): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993743.684:10188): pid=63864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=63902 suid=74 rport=59648 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993743.685:10189): pid=63864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=63902 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993743.686:10190): pid=63864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993743.687:10191): pid=63864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=63864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993743.687:10192): pid=63864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993743.867:10193): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993743.867:10194): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993743.929:10195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993743.935:10196): pid=64471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993743.935:10197): pid=64471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637861756F77716E786263676B6268666C6C6C776C736F716669627567637066203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993743.936:10198): pid=64471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993743.939:10199): pid=64471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993744.422:10200): prog-id=514 op=LOAD
type=BPF msg=audit(1780993744.422:10201): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993744.429:10202): pid=64561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=64561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993744.430:10203): pid=64468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=64561 suid=74 rport=59650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993744.430:10204): pid=64468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=64561 suid=74 rport=59650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1780993744.437:10205): prog-id=515 op=LOAD
type=BPF msg=audit(1780993744.437:10206): prog-id=516 op=LOAD
type=BPF msg=audit(1780993744.437:10207): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993744.437:10208): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993744.440:10209): prog-id=517 op=LOAD
type=BPF msg=audit(1780993744.440:10210): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993744.443:10211): prog-id=518 op=LOAD
type=BPF msg=audit(1780993744.443:10212): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993744.443:10213): prog-id=519 op=LOAD
type=BPF msg=audit(1780993744.443:10214): prog-id=520 op=LOAD
type=BPF msg=audit(1780993744.443:10215): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993744.443:10216): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993744.443:10217): prog-id=521 op=LOAD
type=BPF msg=audit(1780993744.443:10218): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993744.444:10219): prog-id=522 op=LOAD
type=BPF msg=audit(1780993744.444:10220): prog-id=523 op=LOAD
type=BPF msg=audit(1780993744.444:10221): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993744.444:10222): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993744.570:10223): prog-id=524 op=LOAD
type=SYSCALL msg=audit(1780993744.570:10223): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd9ba0b550 a2=90 a3=9500000001 items=0 ppid=64594 pid=64596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993744.570:10223): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663032643162656230386638376638376364353537623037373231386431
type=SERVICE_START msg=audit(1780993744.597:10224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993744.604:10225): pid=64633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1780993744.604:10226): pid=64633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1780993744.605:10227): pid=64633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780993744.606:10228): pid=64633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993744.627:10229): pid=64471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993744.627:10230): pid=64471 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993744.632:10231): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993744.632:10232): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993744.661:10233): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993744.661:10234): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993744.672:10235): pid=64633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780993744.673:10236): pid=64633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993744.696:10237): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993744.696:10238): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1780993744.709:10239): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1780993744.817:10240): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993744.817:10241): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993744.830:10242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993744.870:10243): pid=64688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993744.871:10244): pid=64688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716769796E786E7867707876726371636A67686868626165687072646B72626E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993744.871:10245): pid=64688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993744.876:10246): pid=64688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993745.049:10247): pid=64688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993745.050:10248): pid=64688 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993745.053:10249): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993745.053:10250): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1780993745.171:10251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993745.171:10252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993745.285:10253): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993745.285:10254): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1780993745.296:10255): prog-id=525 op=LOAD
type=SYSCALL msg=audit(1780993745.296:10255): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdf9329610 a2=90 a3=9500000001 items=0 ppid=64705 pid=64706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993745.296:10255): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663032643162656230386638376638376364353537623037373231386431
type=USER_END msg=audit(1780993745.315:10256): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993745.315:10257): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1780993745.320:10258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993745.332:10259): pid=64723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1780993745.333:10260): pid=64723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1780993745.333:10261): pid=64723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780993745.335:10262): pid=64723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993745.338:10263): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993745.338:10264): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993745.373:10265): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993745.373:10266): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993745.395:10267): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993745.395:10268): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993745.401:10269): pid=64723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780993745.401:10270): pid=64723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993745.438:10271): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1780993745.449:10272): pid=64759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993745.449:10273): pid=64759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C78657875757269776D63756C76656C6A7A756A786A6263627A747A616A616A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993745.449:10274): pid=64759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993745.452:10275): pid=64759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993745.612:10276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993745.617:10277): pid=64759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993745.618:10278): pid=64759 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993745.624:10279): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993745.624:10280): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993745.644:10281): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993745.644:10282): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993745.674:10283): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993745.674:10284): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993745.690:10285): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993745.690:10286): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993745.716:10287): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993745.717:10288): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1780993745.720:10289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993745.720:10290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993745.743:10291): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993745.743:10292): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993745.799:10293): pid=64844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993745.799:10294): pid=64844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6170716A776A7170756C6C63696B7A626465696D677479677168646F7563636A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993745.800:10295): pid=64844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993745.802:10296): pid=64844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993745.833:10297): prog-id=526 op=LOAD
type=SYSCALL msg=audit(1780993745.833:10297): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd7e8a21f0 a2=90 a3=9500000001 items=0 ppid=64850 pid=64851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993745.833:10297): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663032643162656230386638376638376364353537623037373231386431
type=SERVICE_START msg=audit(1780993745.858:10298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993745.869:10299): pid=64855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1780993745.869:10300): pid=64855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1780993745.870:10301): pid=64855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780993745.871:10302): pid=64855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993745.937:10303): pid=64855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780993745.937:10304): pid=64855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993745.971:10305): pid=64844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993745.972:10306): pid=64844 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993745.974:10307): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993745.975:10308): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993745.975:10309): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993746.002:10310): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993746.002:10311): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993746.028:10312): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993746.028:10313): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993746.136:10314): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993746.136:10315): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993746.146:10316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993746.193:10317): pid=64908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993746.193:10318): pid=64908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7773736F796C65696B797073727A6D776C7367736569646562616C73666A7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993746.195:10319): pid=64908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993746.198:10320): pid=64908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993746.396:10321): pid=64908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993746.397:10322): pid=64908 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993746.401:10323): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993746.401:10324): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1780993746.421:10325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993746.421:10326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993746.440:10327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993746.545:10328): prog-id=527 op=LOAD
type=SYSCALL msg=audit(1780993746.545:10328): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe9b7ad4b0 a2=90 a3=9500000001 items=0 ppid=64936 pid=64937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993746.545:10328): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663032643162656230386638376638376364353537623037373231386431
type=SERVICE_START msg=audit(1780993746.627:10329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993746.637:10330): pid=64965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1780993746.637:10331): pid=64965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1780993746.638:10332): pid=64965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780993746.640:10333): pid=64965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993746.690:10334): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993746.690:10335): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993746.707:10336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993746.723:10337): pid=64965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780993746.724:10338): pid=64965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993746.759:10339): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1780993746.759:10340): pid=64991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993746.759:10341): pid=64991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E676A71787475696E6D627566786764726D71696F6A787866686E6E637064203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993746.760:10342): pid=64991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993746.763:10343): pid=64991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993746.943:10344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993746.947:10345): pid=64991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993746.947:10346): pid=64991 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993746.951:10347): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993746.951:10348): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993747.039:10349): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993747.039:10350): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993747.088:10351): pid=65033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993747.088:10352): pid=65033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B786179687772646E62696E6B68646C6965686E616F716A63716B676B707373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993747.089:10353): pid=65033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993747.091:10354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993747.091:10355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780993747.093:10356): pid=65033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993747.230:10357): prog-id=528 op=LOAD
type=SYSCALL msg=audit(1780993747.230:10357): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd72e2ecb0 a2=90 a3=9500000001 items=0 ppid=65050 pid=65051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993747.230:10357): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663032643162656230386638376638376364353537623037373231386431
type=SERVICE_START msg=audit(1780993747.258:10358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993747.268:10359): pid=65055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1780993747.268:10360): pid=65055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1780993747.269:10361): pid=65055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780993747.270:10362): pid=65055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993747.300:10363): pid=65033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993747.301:10364): pid=65033 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993747.304:10365): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993747.304:10366): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993747.348:10367): pid=65055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780993747.348:10368): pid=65055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993747.393:10369): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1780993747.550:10370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993747.671:10371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993747.671:10372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993748.497:10373): pid=64468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=64561 suid=74 rport=59650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993748.497:10374): pid=64468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=64561 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993748.498:10375): pid=64468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993748.499:10376): pid=64468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=64468 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993748.499:10377): pid=64468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993748.952:10378): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993748.952:10379): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993748.979:10380): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993748.979:10381): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993748.997:10382): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993748.998:10383): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993749.021:10384): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993749.021:10385): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993749.044:10386): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993749.044:10387): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993749.100:10388): pid=65200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993749.101:10389): pid=65200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786179646263776D79697867737270797A79736168716461786A72717A7A676E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993749.101:10390): pid=65200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993749.105:10391): pid=65200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993749.295:10392): pid=65200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993749.295:10393): pid=65200 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993749.298:10394): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993749.298:10395): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993749.325:10396): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993749.325:10397): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993749.369:10398): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993749.369:10399): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993749.389:10400): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993749.389:10401): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993749.423:10402): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993749.423:10403): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993749.444:10404): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993749.444:10405): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993749.499:10406): pid=65245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993749.499:10407): pid=65245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69626473727A69716C6F6D786A737168657076636A746467746D686E6266786C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993749.500:10408): pid=65245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993749.502:10409): pid=65245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993749.675:10410): pid=65245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993749.675:10411): pid=65245 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993749.679:10412): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993749.679:10413): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993749.702:10414): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993749.703:10415): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993749.733:10416): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993749.733:10417): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993749.745:10418): pid=65270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=65270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993749.746:10419): pid=65150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=65270 suid=74 rport=59654 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993749.747:10420): pid=65150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=65270 suid=74 rport=59654 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993749.953:10421): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993749.954:10422): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993750.018:10423): pid=65284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993750.018:10424): pid=65284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6362696D6475646F7273767A77637972646778696963636D6871776969626D67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993750.020:10425): pid=65284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993750.023:10426): pid=65284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993750.200:10427): pid=65284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993750.200:10428): pid=65284 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993750.204:10429): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993750.204:10430): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993750.414:10431): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993750.414:10432): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993750.442:10433): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993750.442:10434): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993750.457:10435): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993750.457:10436): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993750.495:10437): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993750.496:10438): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993750.516:10439): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993750.516:10440): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993750.578:10441): pid=65334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993750.578:10442): pid=65334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69736777616571726C64667476627461796A6C646961686A6274706D62776964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993750.579:10443): pid=65334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993750.582:10444): pid=65334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993750.784:10445): pid=65334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993750.784:10446): pid=65334 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993750.787:10447): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993750.787:10448): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993750.809:10449): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993750.809:10450): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993750.860:10451): pid=65360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993750.860:10452): pid=65360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6674796C70636573756573617A796A706C65796E766A71627062646F646E74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993750.861:10453): pid=65360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993750.864:10454): pid=65360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993751.043:10455): pid=65360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993751.044:10456): pid=65360 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993751.047:10457): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993751.047:10458): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993751.066:10459): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993751.066:10460): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993751.095:10461): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993751.095:10462): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993751.203:10463): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993751.203:10464): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993751.234:10465): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993751.234:10466): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993751.252:10467): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993751.252:10468): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993751.282:10469): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993751.282:10470): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993751.311:10471): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993751.311:10472): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993751.346:10473): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993751.346:10474): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993751.375:10475): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993751.375:10476): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993751.418:10477): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993751.418:10478): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993751.444:10479): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993751.444:10480): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993751.477:10481): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993751.477:10482): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993751.495:10483): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993751.495:10484): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993751.552:10485): pid=65464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993751.553:10486): pid=65464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993751.554:10487): pid=65464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993751.556:10488): pid=65464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993751.738:10489): pid=65464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993751.738:10490): pid=65464 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993751.741:10491): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993751.741:10492): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993751.816:10493): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993751.816:10494): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993751.876:10495): pid=65493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993751.877:10496): pid=65493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7474727A6D7662777A6A756E656266746F7968636265676B6A796175637577203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993751.877:10497): pid=65493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993751.880:10498): pid=65493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993752.044:10499): pid=65493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993752.045:10500): pid=65493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993752.047:10501): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993752.047:10502): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993752.969:10503): pid=65150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=65270 suid=74 rport=59654 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993752.969:10504): pid=65150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=65270 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993752.970:10505): pid=65150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993752.971:10506): pid=65150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=65150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993752.971:10507): pid=65150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993753.923:10508): pid=65678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=65678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993755.456:10509): pid=65524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=65678 suid=74 rport=59590 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993755.456:10510): pid=65524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=65678 suid=74 rport=59590 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993758.089:10511): pid=65524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=65678 suid=74 rport=59590 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993758.089:10512): pid=65524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=65678 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993758.090:10513): pid=65524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993758.090:10514): pid=65524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=65524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993758.090:10515): pid=65524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993759.623:10516): pid=66169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=66169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993759.623:10517): pid=66138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=66169 suid=74 rport=59606 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993759.624:10518): pid=66138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=66169 suid=74 rport=59606 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993760.183:10519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993760.322:10520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993760.337:10521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993760.431:10522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993762.127:10523): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993762.127:10524): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993762.193:10525): pid=66264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993762.194:10526): pid=66264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D67776E74726A75757A7562646B7A6F74786C767868736E76766E7476747778203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993762.195:10527): pid=66264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993762.200:10528): pid=66264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993762.381:10529): pid=66264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993762.382:10530): pid=66264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993762.386:10531): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993762.386:10532): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993763.128:10533): pid=66138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=66169 suid=74 rport=59606 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993763.128:10534): pid=66138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=66169 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993763.129:10535): pid=66138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993763.130:10536): pid=66138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=66138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993763.130:10537): pid=66138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993764.290:10538): pid=66456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=66456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993764.291:10539): pid=66283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=66456 suid=74 rport=45322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993764.292:10540): pid=66283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=66456 suid=74 rport=45322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993766.946:10541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4255340c78284de2b985b8efd92e387c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993767.237:10542): prog-id=529 op=LOAD
type=BPF msg=audit(1780993767.237:10543): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993767.248:10544): prog-id=530 op=LOAD
type=BPF msg=audit(1780993767.249:10545): prog-id=531 op=LOAD
type=BPF msg=audit(1780993767.249:10546): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993767.249:10547): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993767.252:10548): prog-id=532 op=LOAD
type=BPF msg=audit(1780993767.252:10549): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993767.254:10550): prog-id=533 op=LOAD
type=BPF msg=audit(1780993767.254:10551): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993767.254:10552): prog-id=534 op=LOAD
type=BPF msg=audit(1780993767.254:10553): prog-id=535 op=LOAD
type=BPF msg=audit(1780993767.255:10554): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993767.255:10555): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993767.255:10556): prog-id=536 op=LOAD
type=BPF msg=audit(1780993767.255:10557): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993767.255:10558): prog-id=537 op=LOAD
type=BPF msg=audit(1780993767.255:10559): prog-id=538 op=LOAD
type=BPF msg=audit(1780993767.255:10560): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993767.255:10561): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1780993767.278:10562): pid=66274 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-ReadLine-0:1.17-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993767.278:10563): pid=66274 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Copy-0:2.34-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993767.278:10564): pid=66274 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mariadb-connector-c-config-3.2.6-1.el9_0.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993767.278:10565): pid=66274 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mariadb-connector-c-3.2.6-1.el9_0.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993767.278:10566): pid=66274 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-agent-libs-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1780993767.278:10567): pid=66274 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993767.479:10568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993767.479:10569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993767.480:10570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r4255340c78284de2b985b8efd92e387c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993767.915:10571): pid=66283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=66456 suid=74 rport=45322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993767.917:10572): pid=66283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=66456 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993767.917:10573): pid=66283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993767.918:10574): pid=66283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=66283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993767.918:10575): pid=66283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993769.122:10576): pid=67001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993769.123:10577): pid=66915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=67001 suid=74 rport=45324 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993769.123:10578): pid=66915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=67001 suid=74 rport=45324 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993770.873:10579): pid=67125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780993771.239:10580): pid=67127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993771.521:10581): pid=67126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=67127 suid=74 rport=33084 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993771.521:10582): pid=67126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=67127 suid=74 rport=33084 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993772.436:10583): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993772.437:10584): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993772.493:10585): pid=67157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993772.494:10586): pid=67157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64646F6A61676E6F78766F7178616F656D747A6576786C6C7763736D706C6366203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993772.495:10587): pid=67157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993772.500:10588): pid=67157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993772.673:10589): pid=67157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993772.673:10590): pid=67157 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993772.676:10591): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993772.676:10592): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993772.801:10593): pid=66915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=67001 suid=74 rport=45324 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993772.801:10594): pid=66915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67001 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993772.802:10595): pid=66915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993772.803:10596): pid=66915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=66915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993772.803:10597): pid=66915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993773.289:10598): pid=67126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=67127 suid=74 rport=33084 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993773.289:10599): pid=67126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67127 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993773.290:10600): pid=67126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993773.290:10601): pid=67126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993773.290:10602): pid=67126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993774.148:10603): pid=67294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993774.150:10604): pid=67160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=67294 suid=74 rport=37742 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993774.150:10605): pid=67160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=67294 suid=74 rport=37742 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993774.197:10606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993774.513:10607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993775.393:10608): prog-id=539 op=LOAD
type=BPF msg=audit(1780993775.393:10609): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.409:10610): prog-id=540 op=LOAD
type=BPF msg=audit(1780993775.409:10611): prog-id=541 op=LOAD
type=BPF msg=audit(1780993775.409:10612): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.409:10613): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.412:10614): prog-id=542 op=LOAD
type=BPF msg=audit(1780993775.412:10615): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.415:10616): prog-id=543 op=LOAD
type=BPF msg=audit(1780993775.415:10617): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.415:10618): prog-id=544 op=LOAD
type=BPF msg=audit(1780993775.415:10619): prog-id=545 op=LOAD
type=BPF msg=audit(1780993775.415:10620): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.415:10621): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.415:10622): prog-id=546 op=LOAD
type=BPF msg=audit(1780993775.415:10623): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.415:10624): prog-id=547 op=LOAD
type=BPF msg=audit(1780993775.415:10625): prog-id=548 op=LOAD
type=BPF msg=audit(1780993775.415:10626): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.415:10627): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993775.559:10628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=snmpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993775.815:10629): prog-id=549 op=LOAD
type=BPF msg=audit(1780993775.815:10630): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.827:10631): prog-id=550 op=LOAD
type=BPF msg=audit(1780993775.827:10632): prog-id=551 op=LOAD
type=BPF msg=audit(1780993775.827:10633): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.827:10634): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.831:10635): prog-id=552 op=LOAD
type=BPF msg=audit(1780993775.831:10636): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.833:10637): prog-id=553 op=LOAD
type=BPF msg=audit(1780993775.833:10638): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.833:10639): prog-id=554 op=LOAD
type=BPF msg=audit(1780993775.833:10640): prog-id=555 op=LOAD
type=BPF msg=audit(1780993775.833:10641): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.833:10642): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.834:10643): prog-id=556 op=LOAD
type=BPF msg=audit(1780993775.834:10644): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.834:10645): prog-id=557 op=LOAD
type=BPF msg=audit(1780993775.834:10646): prog-id=558 op=LOAD
type=BPF msg=audit(1780993775.834:10647): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993775.834:10648): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993776.054:10649): prog-id=559 op=LOAD
type=BPF msg=audit(1780993776.054:10650): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993776.070:10651): prog-id=560 op=LOAD
type=BPF msg=audit(1780993776.070:10652): prog-id=561 op=LOAD
type=BPF msg=audit(1780993776.070:10653): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993776.070:10654): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993776.073:10655): prog-id=562 op=LOAD
type=BPF msg=audit(1780993776.073:10656): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993776.076:10657): prog-id=563 op=LOAD
type=BPF msg=audit(1780993776.076:10658): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993776.076:10659): prog-id=564 op=LOAD
type=BPF msg=audit(1780993776.076:10660): prog-id=565 op=LOAD
type=BPF msg=audit(1780993776.076:10661): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993776.076:10662): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993776.076:10663): prog-id=566 op=LOAD
type=BPF msg=audit(1780993776.076:10664): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993776.076:10665): prog-id=567 op=LOAD
type=BPF msg=audit(1780993776.076:10666): prog-id=568 op=LOAD
type=BPF msg=audit(1780993776.076:10667): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993776.076:10668): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993776.344:10669): pid=67160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=67294 suid=74 rport=37742 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993776.345:10670): pid=67160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67294 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993776.346:10671): pid=67160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993776.347:10672): pid=67160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993776.347:10673): pid=67160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993776.775:10674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993776.937:10675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993776.969:10676): pid=67683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993776.971:10677): pid=67641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=67683 suid=74 rport=37744 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993776.971:10678): pid=67641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=67683 suid=74 rport=37744 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993779.594:10679): pid=67764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993779.797:10680): pid=67763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=67764 suid=74 rport=38246 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993779.798:10681): pid=67763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=67764 suid=74 rport=38246 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993779.847:10682): pid=67641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=67683 suid=74 rport=37744 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993779.847:10683): pid=67641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67683 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993779.848:10684): pid=67641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993779.849:10685): pid=67641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993779.849:10686): pid=67641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993780.909:10687): pid=67763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=67764 suid=74 rport=38246 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993780.910:10688): pid=67763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67764 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993780.910:10689): pid=67763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993780.911:10690): pid=67763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993780.911:10691): pid=67763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993781.713:10692): pid=67892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993781.714:10693): pid=67822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=67892 suid=74 rport=57204 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993781.714:10694): pid=67822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=67892 suid=74 rport=57204 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993782.739:10695): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993782.739:10696): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993782.800:10697): pid=67980 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993782.800:10698): pid=67980 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696A6E746C707772686D766D78656F707A6A716277757066786F717679636177203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993782.801:10699): pid=67980 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993782.805:10700): pid=67980 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993782.940:10701): pid=67980 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993782.941:10702): pid=67980 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993782.945:10703): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993782.945:10704): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993783.330:10705): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993783.330:10706): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993783.381:10707): pid=67997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993783.381:10708): pid=67997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77777A63726C6262636E6A7878727266626864796E7776736B6475737A727671203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993783.382:10709): pid=67997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993783.385:10710): pid=67997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993783.551:10711): pid=67997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993783.551:10712): pid=67997 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993783.555:10713): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993783.555:10714): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993783.626:10715): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993783.626:10716): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993783.689:10717): pid=68017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993783.690:10718): pid=68017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E78737877796F76676F767373617569676F62737961656B666D766E7465626F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993783.691:10719): pid=68017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993783.694:10720): pid=68017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993783.871:10721): pid=68017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993783.871:10722): pid=68017 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993783.875:10723): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993783.875:10724): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993784.019:10725): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993784.020:10726): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993784.056:10727): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993784.056:10728): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993784.079:10729): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993784.079:10730): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993784.116:10731): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993784.117:10732): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993784.141:10733): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993784.141:10734): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993784.204:10735): pid=68194 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993784.205:10736): pid=68194 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6771726F70706166716D736172786E72657076666B666376746D677A6B646765203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993784.206:10737): pid=68194 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993784.208:10738): pid=68194 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993784.399:10739): pid=68194 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993784.399:10740): pid=68194 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993784.402:10741): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993784.402:10742): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993784.428:10743): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993784.428:10744): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993784.483:10745): pid=68253 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993784.483:10746): pid=68253 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6263636C62636770796E71647378746D6E75646D617164646C7469686F6B6E62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993784.484:10747): pid=68253 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993784.486:10748): pid=68253 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993784.673:10749): pid=68253 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993784.673:10750): pid=68253 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993784.677:10751): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993784.677:10752): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993784.702:10753): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993784.703:10754): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993784.736:10755): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993784.737:10756): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993784.818:10757): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993784.818:10758): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993784.875:10759): pid=68332 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993784.876:10760): pid=68332 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646977736E756A676970666D66796E696F766F69666F7571646975716B6D6179203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993784.877:10761): pid=68332 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993784.880:10762): pid=68332 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993785.064:10763): pid=68332 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993785.064:10764): pid=68332 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993785.067:10765): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993785.067:10766): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993785.182:10767): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993785.182:10768): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993785.226:10769): pid=68348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993785.227:10770): pid=68348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697574726D77786C757A6B777761616777696D72737A6C6F7261736678667761203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993785.228:10771): pid=68348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993785.231:10772): pid=68348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993785.685:10773): pid=68348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993785.685:10774): pid=68348 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993785.689:10775): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993785.689:10776): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993785.877:10777): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993785.877:10778): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993785.939:10779): pid=68443 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993785.939:10780): pid=68443 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616D68656B786C766F78617A6D6E61787867737A70757A6F6D67766F76656A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993785.940:10781): pid=68443 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993785.942:10782): pid=68443 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993786.157:10783): pid=68443 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993786.157:10784): pid=68443 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993786.161:10785): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993786.161:10786): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993786.446:10787): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993786.446:10788): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993786.502:10789): pid=68462 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993786.502:10790): pid=68462 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A69616D68617461796F6970646566776A75706B766F6F6A7179616F687A6473203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993786.504:10791): pid=68462 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993786.506:10792): pid=68462 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993786.688:10793): pid=68462 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993786.689:10794): pid=68462 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993786.693:10795): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993786.693:10796): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993786.782:10797): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993786.782:10798): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993786.837:10799): pid=68486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993786.837:10800): pid=68486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7868766563616A6B717673696566766E70686566797A726D6A6A68716C716D67203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993786.838:10801): pid=68486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993786.840:10802): pid=68486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993787.023:10803): pid=68486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993787.024:10804): pid=68486 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993787.027:10805): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993787.027:10806): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993787.256:10807): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993787.256:10808): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993787.318:10809): pid=68502 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993787.318:10810): pid=68502 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7A6678717070637A6A78747A636E6B7A7265636A6B7468757A676D6D786B70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993787.319:10811): pid=68502 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993787.321:10812): pid=68502 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993787.500:10813): pid=68502 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993787.500:10814): pid=68502 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993787.504:10815): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993787.504:10816): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993787.699:10817): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993787.700:10818): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993787.727:10819): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993787.727:10820): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993787.755:10821): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993787.755:10822): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993787.789:10823): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993787.789:10824): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993787.810:10825): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993787.810:10826): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993787.868:10827): pid=68560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993787.868:10828): pid=68560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636D747A697264756875616E687976787670726670656C6173686266676E6876203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993787.869:10829): pid=68560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993787.871:10830): pid=68560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993787.972:10831): pid=67822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=67892 suid=74 rport=57204 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993787.973:10832): pid=67822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67892 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993787.974:10833): pid=67822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993787.974:10834): pid=67822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=67822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993787.974:10835): pid=67822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993788.041:10836): pid=68560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993788.041:10837): pid=68560 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993788.045:10838): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993788.045:10839): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993788.065:10840): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993788.065:10841): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993788.115:10842): pid=68631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993788.115:10843): pid=68631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B70736A6C736A677079656766626F637778626870716A6F786679726A6D6873203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993788.116:10844): pid=68631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993788.117:10845): pid=68631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993788.286:10846): pid=68631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993788.287:10847): pid=68631 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993788.290:10848): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993788.290:10849): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993788.313:10850): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993788.313:10851): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993788.343:10852): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993788.344:10853): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993788.403:10854): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993788.403:10855): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993788.432:10856): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993788.432:10857): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993788.454:10858): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993788.454:10859): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993788.488:10860): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993788.488:10861): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993788.513:10862): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993788.514:10863): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993788.574:10864): pid=68694 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993788.575:10865): pid=68694 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D66676B67646577756E7972666368757965676F686B7771747461647A6C616E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993788.576:10866): pid=68694 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993788.578:10867): pid=68694 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993788.757:10868): pid=68694 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993788.757:10869): pid=68694 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993788.760:10870): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993788.760:10871): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993788.793:10872): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993788.793:10873): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993788.846:10874): pid=68722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993788.846:10875): pid=68722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7572737A68647A6D65696267717074656E6E6C6378627571617A786F737273203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993788.847:10876): pid=68722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993788.849:10877): pid=68722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993789.030:10878): pid=68722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993789.030:10879): pid=68722 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993789.036:10880): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993789.036:10881): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993789.056:10882): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993789.057:10883): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993789.093:10884): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993789.093:10885): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993789.191:10886): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993789.191:10887): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993789.216:10888): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993789.216:10889): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993789.241:10890): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993789.241:10891): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993789.273:10892): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993789.273:10893): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993789.297:10894): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993789.298:10895): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993789.299:10896): pid=68771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=68771 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993789.300:10897): pid=68634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=68771 suid=74 rport=57210 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993789.300:10898): pid=68634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=68771 suid=74 rport=57210 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1780993789.362:10899): pid=68785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993789.362:10900): pid=68785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63726F746166646A72627264746163646D687A6A6C787274707666686D686463203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993789.363:10901): pid=68785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993789.366:10902): pid=68785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993789.568:10903): pid=68785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993789.569:10904): pid=68785 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993789.573:10905): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993789.573:10906): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993789.603:10907): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993789.603:10908): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993789.656:10909): pid=68803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993789.656:10910): pid=68803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6677707A677763766367667A63656263696F6374766B6E6C7776747361647561203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993789.657:10911): pid=68803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993789.659:10912): pid=68803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993789.873:10913): pid=68803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993789.874:10914): pid=68803 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993789.877:10915): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993789.878:10916): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993789.898:10917): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993789.898:10918): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993789.927:10919): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993789.927:10920): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993790.014:10921): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993790.014:10922): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993790.043:10923): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993790.043:10924): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993790.065:10925): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993790.066:10926): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993790.101:10927): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993790.101:10928): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993790.124:10929): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993790.124:10930): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993790.190:10931): pid=68873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993790.191:10932): pid=68873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766F61666E6B616872647571657A62776A71786E6E72616C737A737577667279203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993790.192:10933): pid=68873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993790.196:10934): pid=68873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993790.390:10935): pid=68873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993790.390:10936): pid=68873 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993790.395:10937): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993790.395:10938): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993790.418:10939): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993790.418:10940): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993790.478:10941): pid=68891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993790.478:10942): pid=68891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D70706B7272656E6C76716D7774626F7966796967637A676A726E63746A706B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993790.479:10943): pid=68891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993790.483:10944): pid=68891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993790.501:10945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993790.505:10946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993790.617:10947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993790.661:10948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993790.672:10949): pid=68891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993790.672:10950): pid=68891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993790.676:10951): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993790.676:10952): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993790.696:10953): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993790.696:10954): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993790.723:10955): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993790.723:10956): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993790.812:10957): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993790.812:10958): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993790.864:10959): pid=68961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993790.864:10960): pid=68961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74757363636A6961646768767579796C6569646E70697467637A6D6F61616666203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993790.865:10961): pid=68961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993790.868:10962): pid=68961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993791.403:10963): prog-id=569 op=LOAD
type=BPF msg=audit(1780993791.403:10964): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993791.413:10965): prog-id=570 op=LOAD
type=BPF msg=audit(1780993791.413:10966): prog-id=571 op=LOAD
type=BPF msg=audit(1780993791.413:10967): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993791.413:10968): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993791.416:10969): prog-id=572 op=LOAD
type=BPF msg=audit(1780993791.416:10970): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993791.419:10971): prog-id=573 op=LOAD
type=BPF msg=audit(1780993791.419:10972): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993791.419:10973): prog-id=574 op=LOAD
type=BPF msg=audit(1780993791.419:10974): prog-id=575 op=LOAD
type=BPF msg=audit(1780993791.419:10975): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993791.419:10976): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993791.419:10977): prog-id=576 op=LOAD
type=BPF msg=audit(1780993791.419:10978): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993791.420:10979): prog-id=577 op=LOAD
type=BPF msg=audit(1780993791.420:10980): prog-id=578 op=LOAD
type=BPF msg=audit(1780993791.420:10981): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993791.420:10982): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993791.485:10983): pid=68961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993791.485:10984): pid=68961 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993791.489:10985): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993791.489:10986): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993791.763:10987): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993791.763:10988): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993791.790:10989): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993791.790:10990): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993791.808:10991): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993791.808:10992): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993791.845:10993): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993791.845:10994): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993791.867:10995): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993791.867:10996): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993791.919:10997): pid=69051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993791.919:10998): pid=69051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64766D62717671796D6971686B737976777365707261676B7571717266787861203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993791.920:10999): pid=69051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993791.924:11000): pid=69051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993792.114:11001): pid=69051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993792.114:11002): pid=69051 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993792.118:11003): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993792.118:11004): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993792.147:11005): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993792.147:11006): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993792.195:11007): pid=69077 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993792.195:11008): pid=69077 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C777473726D6E677170697571686579686C636D77696969636C6D6A6D667969203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993792.195:11009): pid=69077 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993792.198:11010): pid=69077 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993792.390:11011): pid=69077 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993792.391:11012): pid=69077 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993792.395:11013): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993792.395:11014): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993792.419:11015): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993792.419:11016): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993792.443:11017): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993792.443:11018): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993792.537:11019): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993792.537:11020): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993792.562:11021): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993792.562:11022): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993792.578:11023): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993792.579:11024): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993792.614:11025): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993792.614:11026): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993792.638:11027): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993792.638:11028): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993792.701:11029): pid=69139 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993792.702:11030): pid=69139 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6568667561686C676973756B766771746D686E616C636C616C626C7971616463203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993792.702:11031): pid=69139 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993792.705:11032): pid=69139 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993792.784:11033): pid=68634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=68771 suid=74 rport=57210 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993792.784:11034): pid=68634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=68771 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993792.785:11035): pid=68634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993792.786:11036): pid=68634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=68634 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993792.786:11037): pid=68634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993792.908:11038): pid=69139 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993792.909:11039): pid=69139 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993792.912:11040): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993792.912:11041): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993792.937:11042): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993792.937:11043): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993792.987:11044): pid=69165 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993792.988:11045): pid=69165 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74626572657964616F6976716279736769736C67616D73716671697770616F66203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993792.988:11046): pid=69165 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993792.989:11047): pid=69165 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993793.133:11048): pid=69165 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993793.134:11049): pid=69165 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993793.137:11050): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993793.137:11051): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993793.160:11052): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993793.160:11053): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993793.187:11054): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993793.187:11055): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993793.308:11056): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993793.308:11057): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993793.365:11058): pid=69196 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993793.365:11059): pid=69196 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796A79737565656376776E69676D71777A6C6F77776F6A636F65706661646C65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993793.366:11060): pid=69196 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993793.368:11061): pid=69196 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993793.875:11062): prog-id=579 op=LOAD
type=BPF msg=audit(1780993793.875:11063): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993793.888:11064): prog-id=580 op=LOAD
type=BPF msg=audit(1780993793.889:11065): prog-id=581 op=LOAD
type=BPF msg=audit(1780993793.889:11066): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993793.889:11067): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993793.892:11068): prog-id=582 op=LOAD
type=BPF msg=audit(1780993793.892:11069): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993793.894:11070): prog-id=583 op=LOAD
type=BPF msg=audit(1780993793.894:11071): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993793.894:11072): prog-id=584 op=LOAD
type=BPF msg=audit(1780993793.894:11073): prog-id=585 op=LOAD
type=BPF msg=audit(1780993793.894:11074): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993793.894:11075): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993793.895:11076): prog-id=586 op=LOAD
type=BPF msg=audit(1780993793.895:11077): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993793.895:11078): prog-id=587 op=LOAD
type=BPF msg=audit(1780993793.895:11079): prog-id=588 op=LOAD
type=BPF msg=audit(1780993793.895:11080): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993793.895:11081): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993793.968:11082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993793.968:11083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993794.009:11084): pid=69196 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993794.009:11085): pid=69196 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993794.013:11086): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993794.013:11087): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993794.241:11088): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993794.241:11089): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993794.291:11090): pid=69493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993794.291:11091): pid=69493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D797A61697A7775627977627270686B6D6569647479676D6C6B7A616A746570203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993794.292:11092): pid=69493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993794.296:11093): pid=69493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993794.446:11094): pid=69537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=69537 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993794.447:11095): pid=69265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=69537 suid=74 rport=59180 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993794.448:11096): pid=69265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=69537 suid=74 rport=59180 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993794.479:11097): pid=69493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993794.479:11098): pid=69493 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993794.483:11099): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993794.483:11100): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993794.660:11101): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993794.660:11102): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993794.713:11103): pid=69551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993794.713:11104): pid=69551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B766C63676A71766B716C63767A797664766A646F6F6E6B65687979706D6862203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993794.714:11105): pid=69551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993794.716:11106): pid=69551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993795.104:11107): pid=69551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993795.104:11108): pid=69551 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993795.108:11109): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993795.108:11110): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993795.770:11111): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993795.770:11112): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993795.837:11113): pid=69709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993795.838:11114): pid=69709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71787270676F717676757970727A6A7A79687A64627867657174737967756E70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993795.839:11115): pid=69709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993795.842:11116): pid=69709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993796.634:11117): prog-id=589 op=LOAD
type=SYSCALL msg=audit(1780993796.634:11117): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd1b72dc00 a2=90 a3=9500000000 items=0 ppid=69867 pid=69868 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993796.634:11117): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663266386266646637373366303162323162613865653431353966323062
type=BPF msg=audit(1780993796.642:11118): prog-id=590 op=LOAD
type=SYSCALL msg=audit(1780993796.642:11118): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcb6851890 a2=90 a3=9500000000 items=0 ppid=69870 pid=69871 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993796.642:11118): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373038393061313831383365323531663639333238333862323364633138
type=BPF msg=audit(1780993796.645:11119): prog-id=591 op=LOAD
type=SYSCALL msg=audit(1780993796.645:11119): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff31a1e600 a2=90 a3=9500000001 items=0 ppid=69872 pid=69873 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993796.645:11119): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376431313034336461346338653965336539623533313062383838363330
type=SERVICE_START msg=audit(1780993796.711:11120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993796.769:11121): pid=69903 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993796.769:11122): pid=69903 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993796.771:11123): pid=69903 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993796.772:11124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780993796.772:11125): pid=69903 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1780993796.834:11126): pid=69903 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993796.835:11127): pid=69903 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993796.844:11128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993797.057:11129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993797.113:11130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993797.152:11131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993797.418:11132): pid=69265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=69537 suid=74 rport=59180 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993797.420:11133): pid=69265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=69537 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993797.420:11134): pid=69265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993797.421:11135): pid=69265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=69265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993797.421:11136): pid=69265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1780993797.429:11137): prog-id=592 op=LOAD
type=SYSCALL msg=audit(1780993797.429:11137): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe48125e80 a2=90 a3=9500000000 items=0 ppid=70082 pid=70083 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780993797.429:11137): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366136343337626566616430636236363038346463633434653731386337
type=SERVICE_START msg=audit(1780993797.484:11138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993797.665:11139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993797.731:11140): pid=69709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993797.732:11141): pid=69709 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993797.735:11142): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993797.735:11143): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993797.851:11144): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993797.851:11145): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993797.917:11146): pid=70155 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993797.917:11147): pid=70155 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7078676E776371787063627971766C7A7574666D74736C7462707A666D746A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993797.918:11148): pid=70155 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993797.923:11149): pid=70155 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993798.099:11150): pid=70155 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993798.099:11151): pid=70155 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993798.103:11152): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993798.103:11153): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993798.127:11154): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993798.127:11155): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993798.184:11156): pid=70227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993798.184:11157): pid=70227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E70716F666463766A61646F787879646669626563787074646476777A666877203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993798.184:11158): pid=70227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993798.186:11159): pid=70227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993798.351:11160): pid=70227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993798.351:11161): pid=70227 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993798.355:11162): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993798.355:11163): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993798.384:11164): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993798.384:11165): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993798.429:11166): pid=70248 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993798.429:11167): pid=70248 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61667A797662647578706D7A7A66636377676A7568786A756D6871636870686F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993798.429:11168): pid=70248 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993798.432:11169): pid=70248 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993798.572:11170): pid=70248 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993798.573:11171): pid=70248 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993798.577:11172): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993798.577:11173): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993798.595:11174): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993798.595:11175): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993798.639:11176): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993798.640:11177): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73716F6F6E6C6E637A6D636271687667616B706B72766464776D6169716A7177203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993798.640:11178): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993798.642:11179): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993798.822:11180): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993798.822:11181): pid=70264 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993798.826:11182): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993798.826:11183): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993798.849:11184): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993798.849:11185): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993798.904:11186): pid=70282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993798.904:11187): pid=70282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73616A707962656D7561616670727475786C6567796C6F6D726266707565706D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993798.905:11188): pid=70282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993798.908:11189): pid=70282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993799.061:11190): pid=70282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993799.061:11191): pid=70282 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993799.064:11192): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993799.064:11193): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993799.079:11194): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993799.079:11195): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993799.132:11196): pid=70298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993799.132:11197): pid=70298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6671757A647369637879636A6E797978696871747A756678677170736F627672203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993799.133:11198): pid=70298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993799.135:11199): pid=70298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993799.297:11200): pid=70298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993799.297:11201): pid=70298 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993799.300:11202): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993799.300:11203): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993799.320:11204): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993799.321:11205): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993799.361:11206): pid=70329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993799.361:11207): pid=70329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666165626479736170746D647A7972746765796763647764666F6B6571766E79203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993799.362:11208): pid=70329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993799.364:11209): pid=70329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993799.532:11210): pid=70329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993799.532:11211): pid=70329 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993799.534:11212): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993799.534:11213): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993799.554:11214): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993799.554:11215): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993799.609:11216): pid=70345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993799.610:11217): pid=70345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716D78616E787063626F76657465747469646A647161696E6E64697668707062203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993799.610:11218): pid=70345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993799.613:11219): pid=70345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993799.805:11220): pid=70345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993799.805:11221): pid=70345 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993799.808:11222): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993799.808:11223): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993799.828:11224): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993799.828:11225): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993799.858:11226): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993799.858:11227): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993799.877:11228): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993799.877:11229): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993799.915:11230): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993799.915:11231): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993800.173:11232): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993800.173:11233): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993800.212:11234): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993800.212:11235): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993800.244:11236): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993800.244:11237): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993800.298:11238): pid=70415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993800.299:11239): pid=70415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716364676578786261616974627068656E7A6C67636D796D6770687976617474203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993800.299:11240): pid=70415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993800.302:11241): pid=70415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993800.490:11242): pid=70415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993800.490:11243): pid=70415 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993800.494:11244): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993800.494:11245): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993800.633:11246): pid=70418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=70418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993800.635:11247): pid=70141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=70418 suid=74 rport=59188 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993800.635:11248): pid=70141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=70418 suid=74 rport=59188 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993800.695:11249): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993800.695:11250): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993800.731:11251): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993800.731:11252): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993800.758:11253): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993800.758:11254): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993800.824:11255): pid=70445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993800.824:11256): pid=70445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6874636E6C71777369796A6176647A6D6B6B6970657A6A69777572617A6F6A72203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993800.825:11257): pid=70445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993800.829:11258): pid=70445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993801.007:11259): pid=70445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993801.007:11260): pid=70445 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993801.011:11261): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993801.011:11262): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993801.205:11263): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993801.205:11264): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993801.247:11265): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993801.247:11266): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993801.276:11267): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993801.277:11268): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993801.331:11269): pid=70482 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993801.331:11270): pid=70482 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7278787A6D7A7166706D7866736F7179626C666F6176707366727472786F6B6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993801.332:11271): pid=70482 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993801.335:11272): pid=70482 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993801.510:11273): pid=70482 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993801.510:11274): pid=70482 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993801.514:11275): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993801.514:11276): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993801.724:11277): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993801.724:11278): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993801.760:11279): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993801.760:11280): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993801.789:11281): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993801.789:11282): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993801.853:11283): pid=70511 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993801.854:11284): pid=70511 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A63616E68696F63647A6A6678676661696768616B6378627769717262776C69203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993801.854:11285): pid=70511 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993801.858:11286): pid=70511 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993802.029:11287): pid=70511 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993802.030:11288): pid=70511 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993802.034:11289): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993802.034:11290): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993802.063:11291): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993802.064:11292): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993802.118:11293): pid=70527 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993802.118:11294): pid=70527 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767874716D7670726F746578626274737A6D7975756F6D71756C6C6861797172203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993802.119:11295): pid=70527 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993802.122:11296): pid=70527 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993802.598:11297): prog-id=593 op=LOAD
type=BPF msg=audit(1780993802.598:11298): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993802.615:11299): prog-id=594 op=LOAD
type=BPF msg=audit(1780993802.615:11300): prog-id=595 op=LOAD
type=BPF msg=audit(1780993802.615:11301): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993802.615:11302): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993802.619:11303): prog-id=596 op=LOAD
type=BPF msg=audit(1780993802.619:11304): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993802.622:11305): prog-id=597 op=LOAD
type=BPF msg=audit(1780993802.622:11306): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993802.622:11307): prog-id=598 op=LOAD
type=BPF msg=audit(1780993802.622:11308): prog-id=599 op=LOAD
type=BPF msg=audit(1780993802.622:11309): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993802.622:11310): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993802.622:11311): prog-id=600 op=LOAD
type=BPF msg=audit(1780993802.622:11312): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993802.622:11313): prog-id=601 op=LOAD
type=BPF msg=audit(1780993802.622:11314): prog-id=602 op=LOAD
type=BPF msg=audit(1780993802.622:11315): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993802.622:11316): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993802.659:11317): pid=70527 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993802.660:11318): pid=70527 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993802.663:11319): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993802.663:11320): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993802.828:11321): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993802.828:11322): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993802.886:11323): pid=70587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993802.886:11324): pid=70587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F65697873676D766C786176706A65686C6B6C6579636F6A666A6E656779796D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993802.887:11325): pid=70587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993802.889:11326): pid=70587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993804.363:11327): pid=70141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=70418 suid=74 rport=59188 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993804.363:11328): pid=70141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=70418 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993804.364:11329): pid=70141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993804.365:11330): pid=70141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=70141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993804.365:11331): pid=70141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1780993804.439:11332): prog-id=603 op=LOAD
type=BPF msg=audit(1780993804.439:11333): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993804.452:11334): prog-id=604 op=LOAD
type=BPF msg=audit(1780993804.452:11335): prog-id=605 op=LOAD
type=BPF msg=audit(1780993804.452:11336): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993804.452:11337): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993804.455:11338): prog-id=606 op=LOAD
type=BPF msg=audit(1780993804.455:11339): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993804.458:11340): prog-id=607 op=LOAD
type=BPF msg=audit(1780993804.458:11341): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993804.458:11342): prog-id=608 op=LOAD
type=BPF msg=audit(1780993804.458:11343): prog-id=609 op=LOAD
type=BPF msg=audit(1780993804.458:11344): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993804.458:11345): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993804.458:11346): prog-id=610 op=LOAD
type=BPF msg=audit(1780993804.459:11347): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993804.459:11348): prog-id=611 op=LOAD
type=BPF msg=audit(1780993804.459:11349): prog-id=612 op=LOAD
type=BPF msg=audit(1780993804.459:11350): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993804.459:11351): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993804.557:11352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_logrotate_crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993804.571:11353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993804.588:11354): pid=70587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993804.588:11355): pid=70587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993804.593:11356): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993804.593:11357): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993804.874:11358): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993804.874:11359): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780993804.876:11360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993804.932:11361): pid=70863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993804.932:11362): pid=70863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78637266776C736F6B746A6B7A63616D6B77636679697A64677A646373747779203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993804.932:11363): pid=70863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993804.936:11364): pid=70863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993805.476:11365): prog-id=613 op=LOAD
type=BPF msg=audit(1780993805.476:11366): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993805.490:11367): prog-id=614 op=LOAD
type=BPF msg=audit(1780993805.491:11368): prog-id=615 op=LOAD
type=BPF msg=audit(1780993805.491:11369): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993805.491:11370): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993805.494:11371): prog-id=616 op=LOAD
type=BPF msg=audit(1780993805.494:11372): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993805.497:11373): prog-id=617 op=LOAD
type=BPF msg=audit(1780993805.497:11374): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993805.497:11375): prog-id=618 op=LOAD
type=BPF msg=audit(1780993805.497:11376): prog-id=619 op=LOAD
type=BPF msg=audit(1780993805.497:11377): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993805.497:11378): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993805.497:11379): prog-id=620 op=LOAD
type=BPF msg=audit(1780993805.497:11380): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993805.497:11381): prog-id=621 op=LOAD
type=BPF msg=audit(1780993805.497:11382): prog-id=622 op=LOAD
type=BPF msg=audit(1780993805.497:11383): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993805.497:11384): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993805.506:11385): pid=70953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=70953 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993805.507:11386): pid=70831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=70953 suid=74 rport=53034 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993805.508:11387): pid=70831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=70953 suid=74 rport=53034 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993805.595:11388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993805.617:11389): pid=70863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993805.617:11390): pid=70863 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993805.621:11391): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993805.621:11392): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993805.829:11393): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993805.829:11394): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993805.888:11395): pid=70981 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993805.888:11396): pid=70981 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746266667175786E72646463796861726665767A757666706874736A62696463203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993805.889:11397): pid=70981 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993805.892:11398): pid=70981 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780993807.181:11399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780993807.513:11400): prog-id=623 op=LOAD
type=BPF msg=audit(1780993807.513:11401): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993807.534:11402): prog-id=624 op=LOAD
type=BPF msg=audit(1780993807.534:11403): prog-id=625 op=LOAD
type=BPF msg=audit(1780993807.534:11404): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993807.534:11405): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993807.538:11406): prog-id=626 op=LOAD
type=BPF msg=audit(1780993807.538:11407): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993807.541:11408): prog-id=627 op=LOAD
type=BPF msg=audit(1780993807.541:11409): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993807.541:11410): prog-id=628 op=LOAD
type=BPF msg=audit(1780993807.541:11411): prog-id=629 op=LOAD
type=BPF msg=audit(1780993807.541:11412): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993807.541:11413): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993807.541:11414): prog-id=630 op=LOAD
type=BPF msg=audit(1780993807.541:11415): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993807.541:11416): prog-id=631 op=LOAD
type=BPF msg=audit(1780993807.541:11417): prog-id=632 op=LOAD
type=BPF msg=audit(1780993807.541:11418): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993807.541:11419): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1780993807.557:11420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993807.643:11421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993807.670:11422): pid=70981 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993807.670:11423): pid=70981 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993807.676:11424): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993807.676:11425): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993807.944:11426): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993807.944:11427): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993808.007:11428): pid=71268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993808.007:11429): pid=71268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A72656F7A70626779776C6E676872786E6F776B686578707A616B65706F6179203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993808.009:11430): pid=71268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993808.016:11431): pid=71268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993808.581:11432): pid=70831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=70953 suid=74 rport=53034 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993808.581:11433): pid=70831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=70953 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993808.582:11434): pid=70831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993808.582:11435): pid=70831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=70831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993808.583:11436): pid=70831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1780993809.569:11437): prog-id=633 op=LOAD
type=BPF msg=audit(1780993809.569:11438): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993809.582:11439): prog-id=634 op=LOAD
type=BPF msg=audit(1780993809.582:11440): prog-id=635 op=LOAD
type=BPF msg=audit(1780993809.582:11441): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993809.582:11442): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993809.587:11443): prog-id=636 op=LOAD
type=BPF msg=audit(1780993809.587:11444): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993809.589:11445): prog-id=637 op=LOAD
type=BPF msg=audit(1780993809.589:11446): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993809.589:11447): prog-id=638 op=LOAD
type=BPF msg=audit(1780993809.589:11448): prog-id=639 op=LOAD
type=BPF msg=audit(1780993809.589:11449): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993809.589:11450): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993809.590:11451): prog-id=640 op=LOAD
type=BPF msg=audit(1780993809.590:11452): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993809.590:11453): prog-id=641 op=LOAD
type=BPF msg=audit(1780993809.590:11454): prog-id=642 op=LOAD
type=BPF msg=audit(1780993809.590:11455): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993809.590:11456): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780993809.691:11457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_vnc_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993809.700:11458): pid=71405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=71405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993809.701:11459): pid=71347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=71405 suid=74 rport=53036 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993809.701:11460): pid=71347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=71405 suid=74 rport=53036 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993809.721:11461): pid=71268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993809.722:11462): pid=71268 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993809.726:11463): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993809.726:11464): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993809.759:11465): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993809.759:11466): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993809.794:11467): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993809.794:11468): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993809.915:11469): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993809.915:11470): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993809.986:11471): pid=71433 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993809.986:11472): pid=71433 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7268616D726C727879796A617A77746E646D766879786E6666687A676F626D62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993809.987:11473): pid=71433 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993809.994:11474): pid=71433 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993810.174:11475): pid=71433 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993810.174:11476): pid=71433 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993810.178:11477): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993810.178:11478): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993810.449:11479): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993810.449:11480): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993810.477:11481): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993810.477:11482): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993810.495:11483): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993810.495:11484): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993810.528:11485): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993810.528:11486): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993810.549:11487): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993810.549:11488): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993810.603:11489): pid=71489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993810.603:11490): pid=71489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72716C73736F74727A767A77676B74666974777A6F6272777A78666D636E7861203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993810.604:11491): pid=71489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993810.607:11492): pid=71489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993810.773:11493): pid=71489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993810.774:11494): pid=71489 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993810.779:11495): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993810.779:11496): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993810.804:11497): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993810.804:11498): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993810.838:11499): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993810.838:11500): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993810.863:11501): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993810.864:11502): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993810.895:11503): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993810.895:11504): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993810.918:11505): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993810.919:11506): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993810.984:11507): pid=71532 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993810.984:11508): pid=71532 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726F696C6D616973726F6C726273696867626567737370776178686263626370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993810.985:11509): pid=71532 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993810.987:11510): pid=71532 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993811.153:11511): pid=71532 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993811.153:11512): pid=71532 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993811.157:11513): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993811.157:11514): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993811.181:11515): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993811.181:11516): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993811.212:11517): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993811.212:11518): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993811.302:11519): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993811.302:11520): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993811.364:11521): pid=71562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993811.364:11522): pid=71562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626E796E6E767178727A706F616372716C70666A72707073777A6F69696F6779203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993811.365:11523): pid=71562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993811.368:11524): pid=71562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993811.570:11525): pid=71562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993811.570:11526): pid=71562 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993811.574:11527): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993811.574:11528): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993811.763:11529): pid=71347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=71405 suid=74 rport=53036 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993811.764:11530): pid=71347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=71405 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993811.765:11531): pid=71347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993811.765:11532): pid=71347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=71347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993811.765:11533): pid=71347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993811.887:11534): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993811.887:11535): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993811.946:11536): pid=71587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993811.946:11537): pid=71587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D676A626869756E7472777866697A646475657A7464676961777973767A636C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993811.947:11538): pid=71587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993811.950:11539): pid=71587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993812.124:11540): pid=71587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993812.124:11541): pid=71587 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993812.128:11542): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993812.128:11543): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993812.224:11544): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993812.224:11545): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993812.284:11546): pid=71603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993812.285:11547): pid=71603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D646B6B677378626A7663746763687274667273666B686F686661706B797263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993812.285:11548): pid=71603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993812.288:11549): pid=71603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993812.350:11550): pid=71606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=71606 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993812.352:11551): pid=71573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=71606 suid=74 rport=41922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993812.352:11552): pid=71573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=71606 suid=74 rport=41922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993812.472:11553): pid=71603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993812.473:11554): pid=71603 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993812.477:11555): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993812.477:11556): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993813.873:11557): pid=71573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=71606 suid=74 rport=41922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993813.874:11558): pid=71573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=71606 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993813.874:11559): pid=71573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993813.875:11560): pid=71573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=71573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993813.875:11561): pid=71573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993814.026:11562): pid=71706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=71706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993814.310:11563): pid=71705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=71706 suid=74 rport=41936 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993814.310:11564): pid=71705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=71706 suid=74 rport=41936 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993816.091:11565): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993816.091:11566): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993816.120:11567): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993816.120:11568): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993816.148:11569): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993816.149:11570): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993816.182:11571): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993816.182:11572): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993816.211:11573): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993816.211:11574): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993816.268:11575): pid=71891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993816.269:11576): pid=71891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C6266757766677865656764636E72736E647774656979616665667762696E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993816.269:11577): pid=71891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993816.272:11578): pid=71891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993816.441:11579): pid=71891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993816.441:11580): pid=71891 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993816.445:11581): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993816.445:11582): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993816.473:11583): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993816.473:11584): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993816.507:11585): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993816.507:11586): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993816.531:11587): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993816.531:11588): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993816.565:11589): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993816.565:11590): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993816.591:11591): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993816.591:11592): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993816.654:11593): pid=71943 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993816.654:11594): pid=71943 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E73786D7A7A61786A616C64636F7874757A646874656A767178667278656E67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993816.655:11595): pid=71943 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993816.657:11596): pid=71943 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993816.830:11597): pid=71705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=71706 suid=74 rport=41936 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993816.830:11598): pid=71705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=71706 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993816.832:11599): pid=71705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993816.832:11600): pid=71705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=71705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993816.832:11601): pid=71705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993816.840:11602): pid=71943 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993816.840:11603): pid=71943 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993816.844:11604): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993816.844:11605): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993816.867:11606): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993816.867:11607): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993816.900:11608): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993816.900:11609): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993817.125:11610): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993817.126:11611): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993817.174:11612): pid=71975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993817.174:11613): pid=71975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7575787872756E746B746C6A766E61666F706979767866737177726C77717A74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993817.175:11614): pid=71975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993817.177:11615): pid=71975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993817.339:11616): pid=71975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993817.339:11617): pid=71975 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993817.343:11618): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993817.343:11619): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993817.537:11620): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993817.537:11621): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993817.568:11622): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993817.568:11623): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993817.589:11624): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993817.589:11625): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993817.615:11626): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993817.615:11627): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993817.637:11628): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993817.637:11629): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993817.700:11630): pid=72031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993817.701:11631): pid=72031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667472696A6C74797163737A6D71766E786B787A787A767666666A6F687A766A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993817.701:11632): pid=72031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993817.705:11633): pid=72031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993817.790:11634): pid=72034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=72034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993817.792:11635): pid=71961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=72034 suid=74 rport=41940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993817.792:11636): pid=71961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=72034 suid=74 rport=41940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993817.884:11637): pid=72031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993817.884:11638): pid=72031 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993817.888:11639): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993817.888:11640): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993817.913:11641): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993817.913:11642): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993817.959:11643): pid=72050 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993817.959:11644): pid=72050 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76657166736375726D766361706D65686B777170797673716A7A737572617974203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993817.960:11645): pid=72050 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993817.963:11646): pid=72050 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993818.115:11647): pid=72050 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993818.115:11648): pid=72050 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993818.119:11649): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993818.120:11650): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993818.141:11651): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993818.141:11652): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993818.173:11653): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993818.173:11654): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993818.273:11655): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993818.273:11656): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993818.351:11657): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993818.351:11658): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993818.368:11659): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993818.368:11660): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993818.397:11661): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993818.397:11662): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993818.419:11663): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993818.419:11664): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993818.449:11665): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993818.449:11666): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993818.474:11667): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993818.474:11668): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993818.503:11669): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993818.503:11670): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993818.528:11671): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993818.528:11672): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993818.556:11673): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993818.556:11674): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993818.576:11675): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993818.576:11676): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993818.638:11677): pid=72207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993818.638:11678): pid=72207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993818.639:11679): pid=72207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993818.642:11680): pid=72207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993818.823:11681): pid=72207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993818.823:11682): pid=72207 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993818.827:11683): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993818.828:11684): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993818.928:11685): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993818.928:11686): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993818.983:11687): pid=72287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993818.983:11688): pid=72287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A64726E6974647A756F756C706E6C74726B7A6D636B77776278737A627A7A66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993818.983:11689): pid=72287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993818.986:11690): pid=72287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993819.152:11691): pid=72287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993819.152:11692): pid=72287 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993819.156:11693): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993819.156:11694): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993821.108:11695): pid=71961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=72034 suid=74 rport=41940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993821.108:11696): pid=71961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=72034 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993821.109:11697): pid=71961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993821.109:11698): pid=71961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=71961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993821.109:11699): pid=71961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993821.130:11700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993821.132:11701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993821.324:11702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993821.339:11703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993822.085:11704): pid=72545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=72545 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993822.086:11705): pid=72500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=72545 suid=74 rport=33692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993822.087:11706): pid=72500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=72545 suid=74 rport=33692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993827.183:11707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993827.186:11708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993827.189:11709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993827.341:11710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993827.359:11711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993827.657:11712): pid=72500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=72545 suid=74 rport=33692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993827.658:11713): pid=72500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=72545 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993827.658:11714): pid=72500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993827.659:11715): pid=72500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=72500 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993827.659:11716): pid=72500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993827.771:11717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993827.774:11718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993827.891:11719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993829.152:11720): pid=73089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=73089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993829.217:11721): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993829.217:11722): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993829.279:11723): pid=73103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993829.280:11724): pid=73103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78696274627075767A7A626970697666616A776F6B7468717061736270616D66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993829.281:11725): pid=73103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993829.286:11726): pid=73103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993829.452:11727): pid=73103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993829.452:11728): pid=73103 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993829.454:11729): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993829.455:11730): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1780993831.175:11731): pid=72996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=73089 suid=74 rport=33702 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993831.175:11732): pid=72996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=73089 suid=74 rport=33702 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993834.347:11733): pid=72996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=73089 suid=74 rport=33702 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993834.347:11734): pid=72996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=73089 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993834.348:11735): pid=72996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993834.348:11736): pid=72996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=72996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993834.348:11737): pid=72996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993835.138:11738): pid=73590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=73590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993835.139:11739): pid=73540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=73590 suid=74 rport=43672 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993835.139:11740): pid=73540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=73590 suid=74 rport=43672 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993835.185:11741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993835.506:11742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993838.182:11743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993838.261:11744): pid=73540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=73590 suid=74 rport=43672 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993838.262:11745): pid=73540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=73590 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993838.262:11746): pid=73540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993838.263:11747): pid=73540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=73540 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993838.263:11748): pid=73540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993838.339:11749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993839.518:11750): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993839.518:11751): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993839.521:11752): pid=73844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=73844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993839.522:11753): pid=73833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=73844 suid=74 rport=43674 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993839.523:11754): pid=73833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=73844 suid=74 rport=43674 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1780993839.559:11755): pid=73858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993839.560:11756): pid=73858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756B6C6B747A717770657076626C67756B7164726E796A6D617A706C7A756D79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993839.561:11757): pid=73858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993839.566:11758): pid=73858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993839.731:11759): pid=73858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993839.731:11760): pid=73858 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993839.735:11761): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993839.735:11762): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993840.144:11763): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993840.144:11764): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993840.202:11765): pid=73878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993840.202:11766): pid=73878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74626E7572756572677370666270746768786667736E71797866636E726C7267203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993840.204:11767): pid=73878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993840.206:11768): pid=73878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993840.385:11769): pid=73878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993840.386:11770): pid=73878 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993840.389:11771): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993840.389:11772): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993840.472:11773): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993840.472:11774): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993840.528:11775): pid=73898 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993840.528:11776): pid=73898 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69776F6B64756C74666A73616A787A6C686B6B7879736D667770696564637865203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993840.529:11777): pid=73898 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993840.533:11778): pid=73898 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993840.716:11779): pid=73898 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993840.717:11780): pid=73898 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993840.719:11781): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993840.719:11782): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993840.890:11783): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993840.890:11784): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993840.917:11785): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993840.917:11786): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993840.940:11787): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993840.940:11788): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993840.971:11789): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993840.971:11790): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993840.996:11791): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993840.996:11792): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993841.054:11793): pid=73948 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993841.054:11794): pid=73948 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76776779686366767969736565627A67697361736D7778647462796B69646874203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993841.055:11795): pid=73948 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993841.058:11796): pid=73948 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993841.231:11797): pid=73948 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993841.231:11798): pid=73948 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993841.233:11799): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993841.233:11800): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993841.254:11801): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993841.254:11802): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993841.296:11803): pid=73974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993841.297:11804): pid=73974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69726B6168616D6F6C79617869676B6661787071626F6D6963736B67736D786D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993841.298:11805): pid=73974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993841.300:11806): pid=73974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993841.465:11807): pid=73974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993841.465:11808): pid=73974 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993841.468:11809): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993841.468:11810): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993841.497:11811): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993841.497:11812): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993841.522:11813): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993841.522:11814): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993841.594:11815): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993841.594:11816): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993841.632:11817): pid=74004 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993841.632:11818): pid=74004 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736B746873656F6268727278796377676963777A706176786F64776668657770203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993841.632:11819): pid=74004 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993841.634:11820): pid=74004 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993841.781:11821): pid=74004 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993841.781:11822): pid=74004 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993841.785:11823): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993841.785:11824): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993841.969:11825): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993841.969:11826): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993842.030:11827): pid=74020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993842.030:11828): pid=74020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6778686E6B6E687962636375776E7170637370786F71726775646F6B6C666C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993842.031:11829): pid=74020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993842.033:11830): pid=74020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993842.556:11831): pid=74020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993842.556:11832): pid=74020 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993842.560:11833): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993842.560:11834): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993842.755:11835): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993842.755:11836): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993842.810:11837): pid=74115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993842.810:11838): pid=74115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7161706B71616A6C697A7A67666F79616D79716C646D797273706862636378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993842.812:11839): pid=74115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993842.814:11840): pid=74115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993843.039:11841): pid=74115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993843.039:11842): pid=74115 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993843.043:11843): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993843.043:11844): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993843.376:11845): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993843.376:11846): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993843.432:11847): pid=74142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993843.433:11848): pid=74142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A686E767768646861657075776463616A76686D79697661666E6C626B696C73203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993843.433:11849): pid=74142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993843.436:11850): pid=74142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993843.611:11851): pid=74142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993843.612:11852): pid=74142 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993843.615:11853): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993843.615:11854): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993843.709:11855): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993843.709:11856): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993843.751:11857): pid=73833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=73844 suid=74 rport=43674 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993843.752:11858): pid=73833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=73844 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993843.753:11859): pid=73833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993843.754:11860): pid=73833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=73833 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993843.754:11861): pid=73833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780993843.770:11862): pid=74158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993843.770:11863): pid=74158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646C65727466736779777A73616A706C697461716B676761657675766C687475203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993843.771:11864): pid=74158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993843.773:11865): pid=74158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993843.947:11866): pid=74158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993843.947:11867): pid=74158 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993843.950:11868): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993843.950:11869): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993844.177:11870): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993844.177:11871): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993844.236:11872): pid=74257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993844.236:11873): pid=74257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656F6F6369767776627077706562767265717876676F6C677A7773776A776B6A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993844.237:11874): pid=74257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993844.240:11875): pid=74257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993844.390:11876): pid=74257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993844.390:11877): pid=74257 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993844.394:11878): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993844.394:11879): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993844.592:11880): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993844.592:11881): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993844.628:11882): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993844.628:11883): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993844.651:11884): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993844.651:11885): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993844.690:11886): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993844.690:11887): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993844.715:11888): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993844.715:11889): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993844.766:11890): pid=74447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=74447 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993844.768:11891): pid=74161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=74447 suid=74 rport=58650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993844.770:11892): pid=74161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=74447 suid=74 rport=58650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1780993844.781:11893): pid=74446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993844.781:11894): pid=74446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76707468746778787174686A6A706572677777656171707A6977627A7A617075203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993844.782:11895): pid=74446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993844.784:11896): pid=74446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993844.938:11897): pid=74446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993844.939:11898): pid=74446 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993844.943:11899): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993844.943:11900): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993844.963:11901): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993844.963:11902): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993845.029:11903): pid=74465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993845.029:11904): pid=74465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74797A766D6D6B786E6E647975686C6F676A687165776B6567646C7A616B6279203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993845.030:11905): pid=74465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993845.036:11906): pid=74465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993845.233:11907): pid=74465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993845.233:11908): pid=74465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993845.238:11909): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993845.238:11910): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993845.262:11911): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993845.262:11912): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993845.294:11913): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993845.294:11914): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993845.351:11915): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993845.351:11916): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993845.385:11917): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993845.386:11918): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993845.407:11919): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993845.407:11920): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993845.446:11921): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993845.446:11922): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993845.468:11923): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993845.468:11924): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993845.527:11925): pid=74637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993845.527:11926): pid=74637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62717379737A6F756E6F6578707A6C68716779786E6D6462676663726775716F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993845.528:11927): pid=74637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993845.532:11928): pid=74637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993845.689:11929): pid=74637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993845.690:11930): pid=74637 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993845.694:11931): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993845.694:11932): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993845.718:11933): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993845.719:11934): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993845.780:11935): pid=74655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993845.781:11936): pid=74655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A727166636B68796B667A687A62797562667263766F7371787979656D6F7067203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993845.781:11937): pid=74655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993845.784:11938): pid=74655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993845.960:11939): pid=74655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993845.960:11940): pid=74655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993845.964:11941): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993845.964:11942): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993845.987:11943): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993845.987:11944): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993846.020:11945): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993846.021:11946): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993846.126:11947): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993846.126:11948): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993846.156:11949): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993846.156:11950): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993846.178:11951): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993846.179:11952): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993846.216:11953): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993846.217:11954): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993846.240:11955): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993846.241:11956): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993846.301:11957): pid=74773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993846.302:11958): pid=74773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7670627361786E636A6377737661776E6B776A6F766A6B61656B76646D746F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993846.303:11959): pid=74773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993846.306:11960): pid=74773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993846.483:11961): pid=74773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993846.483:11962): pid=74773 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993846.487:11963): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993846.487:11964): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993846.515:11965): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993846.515:11966): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993846.571:11967): pid=74799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993846.571:11968): pid=74799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7675666D79796E726277616D7A657776677270756E74776C6E62637A75626B69203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993846.572:11969): pid=74799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993846.575:11970): pid=74799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993846.759:11971): pid=74799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993846.760:11972): pid=74799 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993846.764:11973): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993846.764:11974): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993846.786:11975): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993846.786:11976): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993846.818:11977): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993846.818:11978): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993846.883:11979): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993846.883:11980): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993846.907:11981): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993846.907:11982): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993846.929:11983): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993846.929:11984): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993846.965:11985): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993846.966:11986): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993846.987:11987): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993846.987:11988): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993847.039:11989): pid=74871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993847.040:11990): pid=74871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626879706A68767A6871646E686177766671706B676A6E767467736677646470203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993847.040:11991): pid=74871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993847.043:11992): pid=74871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993847.190:11993): pid=74161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=74447 suid=74 rport=58650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993847.190:11994): pid=74161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=74447 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993847.191:11995): pid=74161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993847.192:11996): pid=74161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=74161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993847.192:11997): pid=74161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780993847.300:11998): pid=74871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993847.301:11999): pid=74871 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993847.305:12000): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993847.305:12001): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993847.329:12002): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993847.329:12003): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993847.380:12004): pid=74890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993847.380:12005): pid=74890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F746D7A63646B7A78706D6C6E78756A7973786C7169666565686E787974746B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993847.380:12006): pid=74890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993847.385:12007): pid=74890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993847.639:12008): pid=74890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993847.640:12009): pid=74890 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993847.643:12010): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993847.644:12011): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993847.666:12012): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993847.666:12013): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993847.696:12014): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993847.696:12015): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993847.790:12016): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993847.790:12017): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993847.844:12018): pid=74929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993847.844:12019): pid=74929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F7367636575737A7075667778717567646B63617067766673636D73706D63203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993847.845:12020): pid=74929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993847.847:12021): pid=74929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993848.001:12022): pid=74932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=74932 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993848.003:12023): pid=74893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=74932 suid=74 rport=58658 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993848.003:12024): pid=74893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=74932 suid=74 rport=58658 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1780993848.420:12025): prog-id=643 op=LOAD
type=BPF msg=audit(1780993848.420:12026): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993848.432:12027): prog-id=644 op=LOAD
type=BPF msg=audit(1780993848.432:12028): prog-id=645 op=LOAD
type=BPF msg=audit(1780993848.432:12029): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993848.432:12030): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993848.436:12031): prog-id=646 op=LOAD
type=BPF msg=audit(1780993848.436:12032): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993848.438:12033): prog-id=647 op=LOAD
type=BPF msg=audit(1780993848.438:12034): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993848.439:12035): prog-id=648 op=LOAD
type=BPF msg=audit(1780993848.439:12036): prog-id=649 op=LOAD
type=BPF msg=audit(1780993848.439:12037): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993848.439:12038): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993848.439:12039): prog-id=650 op=LOAD
type=BPF msg=audit(1780993848.439:12040): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993848.439:12041): prog-id=651 op=LOAD
type=BPF msg=audit(1780993848.439:12042): prog-id=652 op=LOAD
type=BPF msg=audit(1780993848.439:12043): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993848.439:12044): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1780993848.499:12045): pid=74929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993848.500:12046): pid=74929 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993848.504:12047): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993848.504:12048): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993848.607:12049): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993848.607:12050): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993848.640:12051): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993848.641:12052): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993848.663:12053): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993848.663:12054): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993848.702:12055): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993848.702:12056): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993848.727:12057): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993848.727:12058): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993848.794:12059): pid=75079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993848.794:12060): pid=75079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F616B73626C786C77656C7473686A62726872666B616D667A6C7A7769636B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993848.795:12061): pid=75079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993848.800:12062): pid=75079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993848.956:12063): pid=75079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993848.956:12064): pid=75079 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993848.960:12065): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993848.960:12066): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993848.982:12067): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993848.982:12068): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993849.039:12069): pid=75097 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993849.040:12070): pid=75097 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717A627867646378786462647979656F75766B6A6B6B74786A6E6C62656B6E6C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993849.040:12071): pid=75097 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993849.043:12072): pid=75097 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993849.221:12073): pid=75097 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993849.222:12074): pid=75097 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993849.226:12075): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993849.226:12076): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993849.254:12077): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993849.254:12078): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993849.288:12079): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993849.288:12080): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993849.389:12081): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993849.389:12082): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993849.420:12083): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993849.420:12084): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993849.441:12085): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993849.442:12086): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993849.480:12087): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993849.480:12088): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993849.507:12089): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993849.507:12090): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993849.577:12091): pid=75167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993849.577:12092): pid=75167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747A696D706C64636466676872696E6661626B77616C776E7070626166616473203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993849.578:12093): pid=75167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993849.581:12094): pid=75167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993849.759:12095): pid=75167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993849.759:12096): pid=75167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993849.765:12097): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993849.765:12098): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993849.788:12099): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993849.789:12100): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993849.851:12101): pid=75185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993849.851:12102): pid=75185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776870656269646F6A7577616366656E767575786176647573787A7469737567203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993849.852:12103): pid=75185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993849.856:12104): pid=75185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993850.043:12105): pid=75185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993850.043:12106): pid=75185 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993850.048:12107): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993850.048:12108): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993850.071:12109): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993850.071:12110): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993850.103:12111): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993850.103:12112): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993850.197:12113): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993850.197:12114): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993850.262:12115): pid=75215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993850.263:12116): pid=75215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69636A66696A627679657769706F6567626C6D7368796667617A66736F6B666D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993850.263:12117): pid=75215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993850.266:12118): pid=75215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1780993850.802:12119): prog-id=653 op=LOAD
type=BPF msg=audit(1780993850.802:12120): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993850.813:12121): prog-id=654 op=LOAD
type=BPF msg=audit(1780993850.813:12122): prog-id=655 op=LOAD
type=BPF msg=audit(1780993850.813:12123): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993850.813:12124): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993850.817:12125): prog-id=656 op=LOAD
type=BPF msg=audit(1780993850.817:12126): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993850.820:12127): prog-id=657 op=LOAD
type=BPF msg=audit(1780993850.820:12128): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993850.820:12129): prog-id=658 op=LOAD
type=BPF msg=audit(1780993850.820:12130): prog-id=659 op=LOAD
type=BPF msg=audit(1780993850.820:12131): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993850.820:12132): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993850.820:12133): prog-id=660 op=LOAD
type=BPF msg=audit(1780993850.820:12134): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993850.820:12135): prog-id=661 op=LOAD
type=BPF msg=audit(1780993850.820:12136): prog-id=662 op=LOAD
type=BPF msg=audit(1780993850.820:12137): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780993850.820:12138): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1780993851.703:12139): pid=74893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=74932 suid=74 rport=58658 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993851.704:12140): pid=74893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=74932 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993851.704:12141): pid=74893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993851.705:12142): pid=74893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=74893 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993851.705:12143): pid=74893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993851.725:12144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993851.727:12145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993851.898:12146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993851.914:12147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993851.914:12148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993851.931:12149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780993851.936:12150): pid=75215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993851.938:12151): pid=75215 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993851.943:12152): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993851.943:12153): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993852.231:12154): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993852.231:12155): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993852.296:12156): pid=75327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993852.296:12157): pid=75327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D68646F7074746270726A61626B786470666A6D66726976676A6F726A7572203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993852.298:12158): pid=75327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993852.304:12159): pid=75327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993852.486:12160): pid=75327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993852.487:12161): pid=75327 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993852.492:12162): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993852.492:12163): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993852.743:12164): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993852.743:12165): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993852.778:12166): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993852.778:12167): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993852.797:12168): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993852.797:12169): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993852.836:12170): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993852.837:12171): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993852.858:12172): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993852.858:12173): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993852.936:12174): pid=75383 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993852.936:12175): pid=75383 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78766E74776C7375727974707377687975757775726B636D7366756C67616573203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993852.939:12176): pid=75383 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993852.941:12177): pid=75383 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993852.981:12178): pid=75386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=75386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993852.981:12179): pid=75313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=75386 suid=74 rport=40296 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993852.981:12180): pid=75313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=75386 suid=74 rport=40296 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993853.091:12181): pid=75383 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993853.092:12182): pid=75383 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993853.095:12183): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993853.095:12184): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993853.116:12185): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993853.116:12186): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993853.154:12187): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993853.154:12188): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993853.177:12189): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993853.177:12190): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993853.210:12191): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993853.211:12192): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993853.226:12193): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993853.226:12194): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993853.292:12195): pid=75427 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993853.292:12196): pid=75427 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6773667764616B6A797261776A7566706F767A6A7076626E766B676E6779796C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993853.293:12197): pid=75427 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993853.296:12198): pid=75427 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993853.470:12199): pid=75427 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993853.471:12200): pid=75427 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993853.475:12201): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993853.475:12202): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993853.498:12203): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993853.498:12204): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993853.534:12205): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993853.535:12206): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993853.640:12207): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993853.640:12208): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993853.692:12209): pid=75465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993853.692:12210): pid=75465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B7374636E6F636E6D7A72726B6D6E72686B6976726E6B6B6179696F6C6E6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993853.693:12211): pid=75465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993853.696:12212): pid=75465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993853.932:12213): pid=75465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993853.933:12214): pid=75465 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993853.936:12215): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993853.937:12216): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993854.193:12217): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993854.193:12218): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993854.253:12219): pid=75563 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993854.253:12220): pid=75563 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B656264667577767370747A777A6E7A78717164746C6C68737871737A6E6472203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993854.254:12221): pid=75563 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993854.257:12222): pid=75563 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993854.431:12223): pid=75563 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993854.431:12224): pid=75563 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993854.434:12225): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993854.434:12226): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993854.530:12227): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993854.530:12228): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993854.587:12229): pid=75620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993854.587:12230): pid=75620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636F6567617479776B6D67766A7364686A706B676E7670707A6B706E686C6D6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993854.588:12231): pid=75620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993854.590:12232): pid=75620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993854.776:12233): pid=75620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993854.777:12234): pid=75620 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993854.781:12235): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993854.781:12236): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993856.594:12237): pid=75313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=75386 suid=74 rport=40296 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993856.594:12238): pid=75313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=75386 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993856.595:12239): pid=75313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993856.595:12240): pid=75313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=75313 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993856.595:12241): pid=75313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993857.311:12242): pid=75730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=75730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993857.312:12243): pid=75729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=75730 suid=74 rport=40312 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993857.312:12244): pid=75729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=75730 suid=74 rport=40312 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993858.186:12245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993858.191:12246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993858.196:12247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993858.201:12248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993858.346:12249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993858.398:12250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993858.443:12251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993858.718:12252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780993858.760:12253): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993858.760:12254): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993858.787:12255): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993858.787:12256): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993858.800:12257): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993858.800:12258): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993858.834:12259): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993858.835:12260): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993858.992:12261): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993858.992:12262): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993859.029:12263): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993859.030:12264): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993859.047:12265): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993859.047:12266): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993859.128:12267): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993859.128:12268): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993859.148:12269): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993859.149:12270): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993859.190:12271): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993859.190:12272): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993859.200:12273): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993859.200:12274): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993859.229:12275): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993859.229:12276): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993859.243:12277): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993859.243:12278): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993859.313:12279): pid=76167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993859.313:12280): pid=76167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66757662637A78757A68646663777169676C617275787066796B6E6E6569656D203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939333835382E373930333639372D3131323432332D3136313931323033333839373537342F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993859.315:12281): pid=76167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993859.319:12282): pid=76167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993859.601:12283): pid=76167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993859.601:12284): pid=76167 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993859.604:12285): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993859.604:12286): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993859.621:12287): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993859.621:12288): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993859.651:12289): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993859.651:12290): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993859.663:12291): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993859.663:12292): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993859.691:12293): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993859.691:12294): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993859.699:12295): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993859.700:12296): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993859.755:12297): pid=76225 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993859.756:12298): pid=76225 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786D79706B626763687770776B7A776B73676E7463647064636C77767A6D776F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939333835382E373930333639372D3131323432332D3136313931323033333839373537342F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993859.756:12299): pid=76225 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993859.758:12300): pid=76225 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993862.784:12301): pid=75729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=75730 suid=74 rport=40312 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993862.785:12302): pid=75729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=75730 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993862.785:12303): pid=75729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993862.785:12304): pid=75729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=75729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993862.785:12305): pid=75729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1780993863.201:12306): pid=76227 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="crudini-0.9.3-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=np0000068156.ooo.test addr=? terminal=pts/0 res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993863.944:12307): pid=76275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=76275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993863.945:12308): pid=76265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=76275 suid=74 rport=37110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993863.946:12309): pid=76265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=76275 suid=74 rport=37110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780993864.050:12310): pid=76225 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993864.050:12311): pid=76225 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993864.053:12312): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993864.053:12313): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993864.072:12314): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993864.072:12315): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993864.094:12316): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993864.094:12317): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1780993865.934:12318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993866.281:12319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993866.760:12320): pid=76265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=76275 suid=74 rport=37110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993866.760:12321): pid=76265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=76275 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993866.761:12322): pid=76265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993866.761:12323): pid=76265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=76265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993866.761:12324): pid=76265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993868.258:12325): pid=76557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=76557 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993868.259:12326): pid=76548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=76557 suid=74 rport=37126 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993868.260:12327): pid=76548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=76557 suid=74 rport=37126 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993869.185:12328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993869.358:12329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993870.988:12330): pid=76548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=76557 suid=74 rport=37126 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993870.989:12331): pid=76548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=76557 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993870.989:12332): pid=76548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993870.990:12333): pid=76548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=76548 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993870.990:12334): pid=76548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993872.216:12335): pid=76850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=76850 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993872.217:12336): pid=76741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=76850 suid=74 rport=53582 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993872.218:12337): pid=76741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=76850 suid=74 rport=53582 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780993873.138:12338): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993873.138:12339): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993873.169:12340): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993873.169:12341): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993873.188:12342): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993873.188:12343): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993873.223:12344): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993873.223:12345): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993873.239:12346): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993873.239:12347): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993873.269:12348): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993873.269:12349): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993873.290:12350): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993873.290:12351): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993873.362:12352): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993873.362:12353): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993873.391:12354): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993873.391:12355): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993873.428:12356): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993873.428:12357): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993873.450:12358): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993873.450:12359): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993873.480:12360): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993873.481:12361): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993873.499:12362): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993873.500:12363): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993873.562:12364): pid=76973 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993873.562:12365): pid=76973 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70757865706F7A757876786C70766A61707763656D717468736B706870676871203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939333837332E313730363832322D3131323637322D3134363831373332303839343036322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993873.564:12366): pid=76973 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993873.568:12367): pid=76973 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993873.859:12368): pid=76973 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993873.860:12369): pid=76973 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993873.862:12370): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993873.862:12371): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993873.889:12372): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993873.889:12373): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993873.914:12374): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993873.914:12375): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993874.128:12376): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993874.128:12377): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993874.159:12378): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993874.159:12379): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993874.177:12380): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993874.177:12381): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993874.215:12382): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993874.215:12383): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993874.233:12384): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993874.234:12385): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993874.268:12386): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993874.268:12387): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993874.285:12388): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993874.286:12389): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993874.371:12390): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993874.371:12391): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993874.401:12392): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993874.401:12393): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993874.438:12394): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993874.438:12395): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993874.458:12396): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993874.458:12397): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993874.488:12398): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993874.488:12399): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993874.506:12400): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993874.506:12401): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780993874.568:12402): pid=77184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780993874.568:12403): pid=77184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A6E6C62656C6376796763666A7A79776C6163636F6C6E77656175626C6F64203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939333837342E313631353535382D3131323734322D3236363639323231393936393539302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780993874.569:12404): pid=77184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780993874.571:12405): pid=77184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993874.849:12406): pid=77184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780993874.849:12407): pid=77184 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780993874.853:12408): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993874.853:12409): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780993874.872:12410): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780993874.872:12411): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780993874.903:12412): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780993874.903:12413): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780993876.310:12414): pid=76741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=76850 suid=74 rport=53582 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993876.310:12415): pid=76741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=76850 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993876.311:12416): pid=76741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993876.311:12417): pid=76741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=76741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993876.313:12418): pid=76741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993877.184:12419): pid=77349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77349 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993877.186:12420): pid=77341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=77349 suid=74 rport=53598 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993877.186:12421): pid=77341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=77349 suid=74 rport=53598 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993880.115:12422): pid=77341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=77349 suid=74 rport=53598 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993880.115:12423): pid=77341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77349 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993880.115:12424): pid=77341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993880.116:12425): pid=77341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993880.116:12426): pid=77341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993880.799:12427): pid=77431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993880.800:12428): pid=77430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=77431 suid=74 rport=55532 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993880.800:12429): pid=77430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=77431 suid=74 rport=55532 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993882.000:12430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993882.005:12431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993882.161:12432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993882.175:12433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993882.585:12434): pid=77430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=77431 suid=74 rport=55532 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993882.585:12435): pid=77430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77431 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993882.585:12436): pid=77430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993882.586:12437): pid=77430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993882.586:12438): pid=77430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993883.181:12439): pid=77490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77490 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993883.182:12440): pid=77489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=77490 suid=74 rport=55534 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993883.182:12441): pid=77489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=77490 suid=74 rport=55534 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993885.356:12442): pid=77489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=77490 suid=74 rport=55534 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993885.356:12443): pid=77489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77490 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993885.357:12444): pid=77489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993885.358:12445): pid=77489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77489 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993885.358:12446): pid=77489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993886.481:12447): pid=77906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993886.482:12448): pid=77896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=77906 suid=74 rport=55544 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993886.482:12449): pid=77896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=77906 suid=74 rport=55544 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993889.188:12450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993889.191:12451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993889.194:12452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993889.198:12453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993889.318:12454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993889.416:12455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993889.541:12456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993889.680:12457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993890.947:12458): pid=77896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=77906 suid=74 rport=55544 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993890.948:12459): pid=77896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77906 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993890.948:12460): pid=77896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993890.949:12461): pid=77896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=77896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993890.949:12462): pid=77896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993892.681:12463): pid=78147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78147 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993892.963:12464): pid=78146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=78147 suid=74 rport=45440 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993892.963:12465): pid=78146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=78147 suid=74 rport=45440 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993892.987:12466): pid=78148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78148 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993892.988:12467): pid=78129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=78148 suid=74 rport=48482 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993892.988:12468): pid=78129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=78148 suid=74 rport=48482 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993894.463:12469): pid=78146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=78147 suid=74 rport=45440 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993894.463:12470): pid=78146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78147 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993894.464:12471): pid=78146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993894.464:12472): pid=78146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78146 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993894.464:12473): pid=78146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993896.315:12474): pid=78129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=78148 suid=74 rport=48482 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993896.316:12475): pid=78129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78148 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993896.316:12476): pid=78129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993896.317:12477): pid=78129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993896.317:12478): pid=78129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993896.337:12479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993896.658:12480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993897.189:12481): pid=78629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78629 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780993897.197:12482): pid=78630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993897.198:12483): pid=78455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=78630 suid=74 rport=48486 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993897.198:12484): pid=78455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=78630 suid=74 rport=48486 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993897.390:12485): pid=78628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=78629 suid=74 rport=39602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993897.390:12486): pid=78628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=78629 suid=74 rport=39602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993898.502:12487): pid=78628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=78629 suid=74 rport=39602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993898.503:12488): pid=78628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78629 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993898.503:12489): pid=78628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993898.504:12490): pid=78628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993898.504:12491): pid=78628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993899.587:12492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993899.743:12493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993900.671:12494): pid=78455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=78630 suid=74 rport=48486 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993900.671:12495): pid=78455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78630 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993900.672:12496): pid=78455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993900.672:12497): pid=78455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993900.673:12498): pid=78455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993901.662:12499): pid=78827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993901.663:12500): pid=78821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=78827 suid=74 rport=36654 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993901.663:12501): pid=78821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=78827 suid=74 rport=36654 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993904.165:12502): pid=78853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993904.255:12503): pid=78852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=78853 suid=74 rport=19426 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993904.256:12504): pid=78852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=78853 suid=74 rport=19426 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993904.394:12505): pid=78821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=78827 suid=74 rport=36654 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993904.394:12506): pid=78821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78827 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993904.395:12507): pid=78821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993904.395:12508): pid=78821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993904.395:12509): pid=78821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993904.816:12510): pid=78852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=78853 suid=74 rport=19426 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993904.816:12511): pid=78852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78853 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993904.817:12512): pid=78852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.157 addr=45.148.10.157 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993904.817:12513): pid=78852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993904.818:12514): pid=78852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.157 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993906.330:12515): pid=79076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993906.331:12516): pid=78936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=79076 suid=74 rport=36664 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993906.331:12517): pid=78936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=79076 suid=74 rport=36664 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993909.470:12518): pid=78936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=79076 suid=74 rport=36664 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993909.471:12519): pid=78936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79076 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993909.471:12520): pid=78936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993909.472:12521): pid=78936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=78936 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993909.472:12522): pid=78936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993910.393:12523): pid=79275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993910.394:12524): pid=79205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=79275 suid=74 rport=49054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993910.395:12525): pid=79205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=79275 suid=74 rport=49054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993912.193:12526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993912.201:12527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993912.314:12528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993912.413:12529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993913.284:12530): pid=79205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=79275 suid=74 rport=49054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993913.284:12531): pid=79205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79275 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993913.284:12532): pid=79205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993913.285:12533): pid=79205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993913.285:12534): pid=79205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993914.090:12535): pid=79408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993914.092:12536): pid=79407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=79408 suid=74 rport=49058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993914.092:12537): pid=79407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=79408 suid=74 rport=49058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993917.187:12538): pid=79407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=79408 suid=74 rport=49058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993917.187:12539): pid=79407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79408 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993917.188:12540): pid=79407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993917.188:12541): pid=79407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993917.188:12542): pid=79407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993917.721:12543): pid=79647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993917.722:12544): pid=79646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=79647 suid=74 rport=49066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993917.722:12545): pid=79646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=79647 suid=74 rport=49066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993919.833:12546): pid=79646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=79647 suid=74 rport=49066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993919.834:12547): pid=79646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79647 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993919.834:12548): pid=79646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993919.835:12549): pid=79646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993919.835:12550): pid=79646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993919.861:12551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993919.865:12552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993919.868:12553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993919.872:12554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993920.028:12555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993920.093:12556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993920.114:12557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993920.378:12558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993920.613:12559): pid=79821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993920.614:12560): pid=79784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=79821 suid=74 rport=36926 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993920.615:12561): pid=79784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=79821 suid=74 rport=36926 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993923.787:12562): pid=79784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=79821 suid=74 rport=36926 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993923.788:12563): pid=79784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79821 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993923.788:12564): pid=79784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993923.789:12565): pid=79784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=79784 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993923.789:12566): pid=79784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993925.070:12567): pid=80155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993925.071:12568): pid=80017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=80155 suid=74 rport=36938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993925.071:12569): pid=80017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=80155 suid=74 rport=36938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993926.887:12570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993927.157:12571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993928.160:12572): pid=80017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=80155 suid=74 rport=36938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993928.161:12573): pid=80017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80155 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993928.161:12574): pid=80017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993928.161:12575): pid=80017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80017 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993928.161:12576): pid=80017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993929.297:12577): pid=80302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993929.299:12578): pid=80294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=80302 suid=74 rport=36940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993929.299:12579): pid=80294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=80302 suid=74 rport=36940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993930.186:12580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993930.356:12581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993932.889:12582): pid=80294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=80302 suid=74 rport=36940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993932.889:12583): pid=80294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80302 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993932.890:12584): pid=80294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993932.890:12585): pid=80294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993932.891:12586): pid=80294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993934.653:12587): pid=80447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80447 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993934.654:12588): pid=80427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=80447 suid=74 rport=58150 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993934.654:12589): pid=80427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=80447 suid=74 rport=58150 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993937.667:12590): pid=80427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=80447 suid=74 rport=58150 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993937.668:12591): pid=80427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80447 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993937.668:12592): pid=80427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993937.669:12593): pid=80427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993937.669:12594): pid=80427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993938.694:12595): pid=80852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993938.695:12596): pid=80851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=80852 suid=74 rport=58166 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993938.695:12597): pid=80851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=80852 suid=74 rport=58166 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993942.336:12598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993942.456:12599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993942.482:12600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993942.588:12601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993943.267:12602): pid=80851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=80852 suid=74 rport=58166 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993943.267:12603): pid=80851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80852 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993943.268:12604): pid=80851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993943.269:12605): pid=80851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993943.269:12606): pid=80851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993944.603:12607): pid=80998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993944.604:12608): pid=80997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=80998 suid=74 rport=55066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993944.604:12609): pid=80997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=80998 suid=74 rport=55066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993948.177:12610): pid=80997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=80998 suid=74 rport=55066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993948.177:12611): pid=80997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80998 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993948.177:12612): pid=80997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993948.178:12613): pid=80997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=80997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993948.178:12614): pid=80997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993949.303:12615): pid=81413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=81413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993949.304:12616): pid=81301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=81413 suid=74 rport=55082 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993949.305:12617): pid=81301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=81413 suid=74 rport=55082 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993950.184:12618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993950.188:12619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993950.191:12620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993950.346:12621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993950.408:12622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993950.433:12623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993950.465:12624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993950.849:12625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993952.819:12626): pid=81301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=81413 suid=74 rport=55082 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993952.820:12627): pid=81301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=81413 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993952.820:12628): pid=81301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993952.821:12629): pid=81301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=81301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993952.821:12630): pid=81301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993953.506:12631): pid=81642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=81642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993953.508:12632): pid=81633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=81642 suid=74 rport=54774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993953.508:12633): pid=81633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=81642 suid=74 rport=54774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993956.117:12634): pid=81633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=81642 suid=74 rport=54774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993956.118:12635): pid=81633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=81642 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993956.118:12636): pid=81633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993956.119:12637): pid=81633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=81633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993956.119:12638): pid=81633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993957.021:12639): pid=81936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=81936 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993957.023:12640): pid=81872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=81936 suid=74 rport=54786 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993957.023:12641): pid=81872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=81936 suid=74 rport=54786 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993957.190:12642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993957.535:12643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993959.875:12644): pid=81872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=81936 suid=74 rport=54786 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993959.876:12645): pid=81872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=81936 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993959.876:12646): pid=81872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993959.877:12647): pid=81872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=81872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993959.877:12648): pid=81872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993960.933:12649): pid=82139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=82139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993960.941:12650): pid=82081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=82139 suid=74 rport=50704 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993960.941:12651): pid=82081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=82139 suid=74 rport=50704 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993961.180:12652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993961.331:12653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993965.477:12654): pid=82081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=82139 suid=74 rport=50704 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993965.478:12655): pid=82081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=82139 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993965.478:12656): pid=82081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993965.479:12657): pid=82081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=82081 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993965.479:12658): pid=82081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993966.654:12659): pid=82561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=82561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993966.656:12660): pid=82511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=82561 suid=74 rport=50716 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993966.656:12661): pid=82511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=82561 suid=74 rport=50716 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993969.669:12662): pid=82511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=82561 suid=74 rport=50716 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993969.669:12663): pid=82511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=82561 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993969.670:12664): pid=82511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993969.671:12665): pid=82511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=82511 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993969.671:12666): pid=82511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993970.580:12667): pid=82642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=82642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993970.581:12668): pid=82588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=82642 suid=74 rport=59058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993970.581:12669): pid=82588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=82642 suid=74 rport=59058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993972.821:12670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993972.823:12671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993972.970:12672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993973.017:12673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993974.721:12674): pid=82588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=82642 suid=74 rport=59058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993974.722:12675): pid=82588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=82642 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993974.722:12676): pid=82588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993974.723:12677): pid=82588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=82588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993974.723:12678): pid=82588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993975.724:12679): pid=83073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993975.725:12680): pid=82971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83073 suid=74 rport=59070 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993975.726:12681): pid=82971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83073 suid=74 rport=59070 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993979.644:12682): pid=82971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83073 suid=74 rport=59070 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993979.645:12683): pid=82971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83073 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993979.645:12684): pid=82971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993979.646:12685): pid=82971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=82971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993979.646:12686): pid=82971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993980.737:12687): pid=83203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83203 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780993981.183:12688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993981.187:12689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993981.190:12690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993981.193:12691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993981.343:12692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993981.389:12693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993981.481:12694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993981.803:12695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780993982.350:12696): pid=83149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83203 suid=74 rport=38494 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993982.350:12697): pid=83149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83203 suid=74 rport=38494 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993984.942:12698): pid=83149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83203 suid=74 rport=38494 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993984.942:12699): pid=83149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83203 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993984.943:12700): pid=83149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993984.943:12701): pid=83149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993984.943:12702): pid=83149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993985.705:12703): pid=83505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993985.707:12704): pid=83422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83505 suid=74 rport=38496 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993985.707:12705): pid=83422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83505 suid=74 rport=38496 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993987.889:12706): pid=83422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83505 suid=74 rport=38496 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993987.889:12707): pid=83422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83505 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993987.890:12708): pid=83422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993987.890:12709): pid=83422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83422 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993987.890:12710): pid=83422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780993987.904:12711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993988.241:12712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993988.385:12713): pid=83775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83775 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993988.386:12714): pid=83764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83775 suid=74 rport=38500 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993988.387:12715): pid=83764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83775 suid=74 rport=38500 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993990.612:12716): pid=83764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83775 suid=74 rport=38500 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993990.613:12717): pid=83764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83775 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993990.613:12718): pid=83764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993990.614:12719): pid=83764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993990.614:12720): pid=83764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993991.088:12721): pid=83857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83857 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993991.089:12722): pid=83848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83857 suid=74 rport=36264 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993991.089:12723): pid=83848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83857 suid=74 rport=36264 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780993992.181:12724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780993992.349:12725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993992.756:12726): pid=83848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83857 suid=74 rport=36264 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993992.756:12727): pid=83848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83857 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993992.757:12728): pid=83848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993992.757:12729): pid=83848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83848 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993992.757:12730): pid=83848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993993.197:12731): pid=83912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993993.198:12732): pid=83903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83912 suid=74 rport=36272 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993993.199:12733): pid=83903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=83912 suid=74 rport=36272 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993995.311:12734): pid=83903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83912 suid=74 rport=36272 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993995.312:12735): pid=83903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83912 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993995.312:12736): pid=83903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993995.312:12737): pid=83903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=83903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993995.312:12738): pid=83903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993995.921:12739): pid=84094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780993995.922:12740): pid=84052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=84094 suid=74 rport=36282 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780993995.922:12741): pid=84052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=84094 suid=74 rport=36282 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993999.259:12742): pid=84052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=84094 suid=74 rport=36282 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780993999.259:12743): pid=84052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84094 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780993999.260:12744): pid=84052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780993999.260:12745): pid=84052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780993999.260:12746): pid=84052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994000.432:12747): pid=84349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84349 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994000.433:12748): pid=84226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=84349 suid=74 rport=40244 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994000.433:12749): pid=84226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=84349 suid=74 rport=40244 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994003.190:12750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994003.194:12751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994003.309:12752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994003.448:12753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994003.620:12754): pid=84226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=84349 suid=74 rport=40244 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994003.620:12755): pid=84226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84349 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994003.621:12756): pid=84226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994003.621:12757): pid=84226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994003.621:12758): pid=84226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994004.256:12759): pid=84474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994004.257:12760): pid=84473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=84474 suid=74 rport=40248 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994004.257:12761): pid=84473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=84474 suid=74 rport=40248 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994009.529:12762): pid=84473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=84474 suid=74 rport=40248 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994009.529:12763): pid=84473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84474 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994009.529:12764): pid=84473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994009.530:12765): pid=84473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994009.530:12766): pid=84473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994010.431:12767): pid=84821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994010.433:12768): pid=84731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=84821 suid=74 rport=55146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994010.433:12769): pid=84731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=84821 suid=74 rport=55146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994012.189:12770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994012.192:12771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994012.195:12772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994012.199:12773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994012.293:12774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994012.403:12775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994012.454:12776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994012.654:12777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994013.925:12778): pid=84731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=84821 suid=74 rport=55146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994013.926:12779): pid=84731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84821 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994013.927:12780): pid=84731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994013.928:12781): pid=84731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=84731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994013.928:12782): pid=84731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994015.130:12783): pid=85132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85132 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994015.131:12784): pid=85122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=85132 suid=74 rport=55162 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994015.131:12785): pid=85122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=85132 suid=74 rport=55162 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994015.964:12786): pid=85306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994016.240:12787): pid=85305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=85306 suid=74 rport=57802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994016.240:12788): pid=85305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=85306 suid=74 rport=57802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994017.716:12789): pid=85305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=85306 suid=74 rport=57802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994017.716:12790): pid=85305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85306 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994017.717:12791): pid=85305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994017.717:12792): pid=85305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994017.717:12793): pid=85305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994018.655:12794): pid=85122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=85132 suid=74 rport=55162 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994018.655:12795): pid=85122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85132 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994018.656:12796): pid=85122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994018.657:12797): pid=85122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85122 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994018.657:12798): pid=85122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994018.675:12799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994018.979:12800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994019.205:12801): pid=85503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85503 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994019.410:12802): pid=85502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=85503 suid=74 rport=53632 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994019.410:12803): pid=85502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=85503 suid=74 rport=53632 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994019.649:12804): pid=85504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85504 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994019.650:12805): pid=85501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=85504 suid=74 rport=55168 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994019.650:12806): pid=85501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=85504 suid=74 rport=55168 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994020.543:12807): pid=85502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=85503 suid=74 rport=53632 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994020.543:12808): pid=85502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85503 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994020.544:12809): pid=85502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994020.545:12810): pid=85502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85502 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994020.545:12811): pid=85502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994022.504:12812): pid=85501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=85504 suid=74 rport=55168 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994022.505:12813): pid=85501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85504 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994022.505:12814): pid=85501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994022.505:12815): pid=85501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85501 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994022.505:12816): pid=85501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994022.518:12817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994022.660:12818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994023.412:12819): pid=85630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994023.413:12820): pid=85621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=85630 suid=74 rport=38014 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994023.414:12821): pid=85621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=85630 suid=74 rport=38014 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994026.166:12822): pid=85621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=85630 suid=74 rport=38014 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994026.167:12823): pid=85621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85630 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994026.167:12824): pid=85621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994026.168:12825): pid=85621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994026.168:12826): pid=85621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994026.926:12827): pid=86044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994026.928:12828): pid=85999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=86044 suid=74 rport=38028 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994026.928:12829): pid=85999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=86044 suid=74 rport=38028 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994029.376:12830): pid=85999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86044 suid=74 rport=38028 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994029.376:12831): pid=85999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86044 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994029.377:12832): pid=85999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994029.378:12833): pid=85999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=85999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994029.378:12834): pid=85999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994030.256:12835): pid=86074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86074 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994030.256:12836): pid=86065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=86074 suid=74 rport=56602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994030.256:12837): pid=86065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=86074 suid=74 rport=56602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994032.041:12838): pid=86065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86074 suid=74 rport=56602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994032.041:12839): pid=86065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86074 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994032.042:12840): pid=86065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994032.043:12841): pid=86065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86065 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994032.043:12842): pid=86065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994032.477:12843): pid=86145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994032.478:12844): pid=86144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=86145 suid=74 rport=56614 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994032.478:12845): pid=86144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=86145 suid=74 rport=56614 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994034.187:12846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994034.189:12847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994034.305:12848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994034.440:12849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994034.723:12850): pid=86144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86145 suid=74 rport=56614 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994034.723:12851): pid=86144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86145 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994034.724:12852): pid=86144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994034.724:12853): pid=86144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86144 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994034.724:12854): pid=86144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994035.665:12855): pid=86333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994035.666:12856): pid=86201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=86333 suid=74 rport=56618 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994035.666:12857): pid=86201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=86333 suid=74 rport=56618 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994040.524:12858): pid=86201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86333 suid=74 rport=56618 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994040.524:12859): pid=86201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86333 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994040.525:12860): pid=86201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994040.526:12861): pid=86201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994040.526:12862): pid=86201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994041.704:12863): pid=86697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86697 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994041.705:12864): pid=86688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=86697 suid=74 rport=38038 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994041.706:12865): pid=86688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=86697 suid=74 rport=38038 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994043.186:12866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994043.189:12867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994043.191:12868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994043.194:12869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994043.366:12870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994043.382:12871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994043.556:12872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994043.779:12873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994045.746:12874): pid=86688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=86697 suid=74 rport=38038 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994045.747:12875): pid=86688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86697 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994045.748:12876): pid=86688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994045.748:12877): pid=86688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994045.748:12878): pid=86688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994046.803:12879): pid=87040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994046.804:12880): pid=86951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=87040 suid=74 rport=38042 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994046.805:12881): pid=86951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=87040 suid=74 rport=38042 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994049.182:12882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994049.512:12883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994050.904:12884): pid=86951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87040 suid=74 rport=38042 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994050.904:12885): pid=86951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87040 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994050.905:12886): pid=86951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994050.905:12887): pid=86951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=86951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994050.905:12888): pid=86951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994051.710:12889): pid=87280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87280 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994051.711:12890): pid=87221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=87280 suid=74 rport=60596 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994051.711:12891): pid=87221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=87280 suid=74 rport=60596 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994052.932:12892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994053.095:12893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994055.617:12894): pid=87221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87280 suid=74 rport=60596 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994055.617:12895): pid=87221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87280 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994055.618:12896): pid=87221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994055.619:12897): pid=87221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87221 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994055.619:12898): pid=87221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994056.694:12899): pid=87621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994056.696:12900): pid=87521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=87621 suid=74 rport=60600 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994056.696:12901): pid=87521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=87621 suid=74 rport=60600 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994060.129:12902): pid=87521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87621 suid=74 rport=60600 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994060.130:12903): pid=87521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87621 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994060.130:12904): pid=87521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994060.131:12905): pid=87521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994060.131:12906): pid=87521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994061.316:12907): pid=87718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994061.317:12908): pid=87656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=87718 suid=74 rport=49446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994061.317:12909): pid=87656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=87718 suid=74 rport=49446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994064.565:12910): pid=87656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=87718 suid=74 rport=49446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994064.566:12911): pid=87656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87718 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994064.566:12912): pid=87656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994064.567:12913): pid=87656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994064.567:12914): pid=87656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994064.580:12915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994064.584:12916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994064.758:12917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994064.785:12918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994065.664:12919): pid=88048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=88048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994065.666:12920): pid=87900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=88048 suid=74 rport=49450 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994065.666:12921): pid=87900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=88048 suid=74 rport=49450 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994067.230:12922): pid=87900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88048 suid=74 rport=49450 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994067.231:12923): pid=87900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=88048 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994067.232:12924): pid=87900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994067.232:12925): pid=87900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=87900 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994067.233:12926): pid=87900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994068.045:12927): pid=88189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=88189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994068.046:12928): pid=88188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=88189 suid=74 rport=49454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994068.046:12929): pid=88188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=88189 suid=74 rport=49454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994071.267:12930): pid=88188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88189 suid=74 rport=49454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994071.267:12931): pid=88188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=88189 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994071.268:12932): pid=88188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994071.268:12933): pid=88188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=88188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994071.268:12934): pid=88188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994072.798:12935): pid=88322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=88322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994072.800:12936): pid=88313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=88322 suid=74 rport=52960 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994072.800:12937): pid=88313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=88322 suid=74 rport=52960 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994074.184:12938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994074.188:12939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994074.192:12940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994074.195:12941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994074.402:12942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994074.432:12943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994074.448:12944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994074.652:12945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994077.280:12946): pid=88313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88322 suid=74 rport=52960 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994077.281:12947): pid=88313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=88322 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994077.281:12948): pid=88313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994077.282:12949): pid=88313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=88313 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994077.282:12950): pid=88313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994078.163:12951): pid=88932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=88932 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994078.164:12952): pid=88841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=88932 suid=74 rport=52976 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994078.164:12953): pid=88841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=88932 suid=74 rport=52976 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994080.062:12954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994080.351:12955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994081.562:12956): pid=88841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=88932 suid=74 rport=52976 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994081.562:12957): pid=88841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=88932 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994081.562:12958): pid=88841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994081.563:12959): pid=88841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=88841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994081.563:12960): pid=88841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994082.063:12961): pid=89062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994083.013:12962): pid=89061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=89062 suid=74 rport=57568 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994083.013:12963): pid=89061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=89062 suid=74 rport=57568 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994083.183:12964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994083.351:12965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994086.139:12966): pid=89061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89062 suid=74 rport=57568 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994086.139:12967): pid=89061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89062 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994086.140:12968): pid=89061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994086.140:12969): pid=89061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994086.140:12970): pid=89061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994087.458:12971): pid=89349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89349 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994087.502:12972): pid=89299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=89349 suid=74 rport=57578 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994087.502:12973): pid=89299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=89349 suid=74 rport=57578 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994090.994:12974): pid=89299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89349 suid=74 rport=57578 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994090.994:12975): pid=89299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89349 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994090.995:12976): pid=89299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994090.996:12977): pid=89299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994090.996:12978): pid=89299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994092.972:12979): pid=89631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994092.973:12980): pid=89622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=89631 suid=74 rport=53110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994092.974:12981): pid=89622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=89631 suid=74 rport=53110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994095.189:12982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994095.193:12983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994095.295:12984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994095.346:12985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994096.513:12986): pid=89622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89631 suid=74 rport=53110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994096.514:12987): pid=89622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89631 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994096.514:12988): pid=89622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994096.514:12989): pid=89622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89622 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994096.514:12990): pid=89622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994097.865:12991): pid=89910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994098.793:12992): pid=89883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=89910 suid=74 rport=53118 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994098.793:12993): pid=89883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=89910 suid=74 rport=53118 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994100.767:12994): pid=89883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89910 suid=74 rport=53118 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994100.767:12995): pid=89883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89910 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994100.768:12996): pid=89883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994100.768:12997): pid=89883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994100.768:12998): pid=89883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994101.335:12999): pid=89994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994101.336:13000): pid=89937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=89994 suid=74 rport=41724 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994101.336:13001): pid=89937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=89994 suid=74 rport=41724 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994104.019:13002): pid=89937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=89994 suid=74 rport=41724 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994104.019:13003): pid=89937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89994 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994104.020:13004): pid=89937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994104.020:13005): pid=89937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=89937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994104.020:13006): pid=89937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994105.191:13007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994105.195:13008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994105.198:13009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994105.201:13010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994105.341:13011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994105.385:13012): pid=90282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=90282 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994105.386:13013): pid=90200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=90282 suid=74 rport=41734 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994105.387:13014): pid=90200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=90282 suid=74 rport=41734 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780994105.455:13015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994105.543:13016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994105.606:13017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994109.318:13018): pid=90200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90282 suid=74 rport=41734 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994109.319:13019): pid=90200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=90282 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994109.320:13020): pid=90200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994109.320:13021): pid=90200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=90200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994109.320:13022): pid=90200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994110.103:13023): pid=90548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=90548 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994110.104:13024): pid=90547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=90548 suid=74 rport=50418 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994110.104:13025): pid=90547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=90548 suid=74 rport=50418 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994111.181:13026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994111.464:13027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994114.182:13028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994114.354:13029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994115.121:13030): pid=90547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90548 suid=74 rport=50418 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994115.121:13031): pid=90547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=90548 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994115.122:13032): pid=90547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994115.122:13033): pid=90547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=90547 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994115.122:13034): pid=90547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994116.339:13035): pid=90960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=90960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994116.340:13036): pid=90759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=90960 suid=74 rport=50430 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994116.340:13037): pid=90759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=90960 suid=74 rport=50430 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994119.876:13038): pid=90759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=90960 suid=74 rport=50430 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994119.876:13039): pid=90759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=90960 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994119.876:13040): pid=90759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994119.877:13041): pid=90759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=90759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994119.877:13042): pid=90759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994121.080:13043): pid=91145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=91145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994121.081:13044): pid=91136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=91145 suid=74 rport=43650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994121.081:13045): pid=91136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=91145 suid=74 rport=43650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994124.843:13046): pid=91136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91145 suid=74 rport=43650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994124.843:13047): pid=91136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=91145 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994124.844:13048): pid=91136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994124.844:13049): pid=91136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=91136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994124.844:13050): pid=91136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994126.189:13051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994126.192:13052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994126.320:13053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994126.452:13054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994126.720:13055): pid=91450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=91450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994126.721:13056): pid=91231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=91450 suid=74 rport=43666 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994126.722:13057): pid=91231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=91450 suid=74 rport=43666 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994131.952:13058): pid=91231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91450 suid=74 rport=43666 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994131.953:13059): pid=91231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=91450 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994131.953:13060): pid=91231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994131.954:13061): pid=91231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=91231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994131.954:13062): pid=91231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994134.036:13063): pid=91817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=91817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994134.037:13064): pid=91800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=91817 suid=74 rport=51112 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994134.037:13065): pid=91800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=91817 suid=74 rport=51112 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994135.641:13066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994135.644:13067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994135.647:13068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994135.650:13069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994135.748:13070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994135.865:13071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994135.918:13072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994136.251:13073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994136.261:13074): pid=91800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=91817 suid=74 rport=51112 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994136.262:13075): pid=91800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=91817 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994136.263:13076): pid=91800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994136.263:13077): pid=91800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=91800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994136.263:13078): pid=91800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994136.770:13079): pid=92098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994136.771:13080): pid=92056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=92098 suid=74 rport=51116 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994136.771:13081): pid=92056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=92098 suid=74 rport=51116 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994137.511:13082): pid=92198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994137.783:13083): pid=92196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92198 suid=74 rport=41928 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994137.783:13084): pid=92196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92198 suid=74 rport=41928 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994137.940:13085): pid=92056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92098 suid=74 rport=51116 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994137.941:13086): pid=92056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92098 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994137.941:13087): pid=92056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994137.942:13088): pid=92056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994137.942:13089): pid=92056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994138.446:13090): pid=92260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92260 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994138.448:13091): pid=92259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=92260 suid=74 rport=51120 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994138.448:13092): pid=92259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=92260 suid=74 rport=51120 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994139.231:13093): pid=92196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92198 suid=74 rport=41928 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994139.231:13094): pid=92196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92198 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994139.232:13095): pid=92196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994139.232:13096): pid=92196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994139.232:13097): pid=92196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994141.513:13098): pid=92259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92260 suid=74 rport=51120 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994141.514:13099): pid=92259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92260 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994141.514:13100): pid=92259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994141.514:13101): pid=92259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92259 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994141.514:13102): pid=92259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994141.527:13103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994141.841:13104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994143.282:13105): pid=92562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92562 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994143.283:13106): pid=92483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=92562 suid=74 rport=58158 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994143.283:13107): pid=92483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=92562 suid=74 rport=58158 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994144.617:13108): pid=92576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994144.837:13109): pid=92575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92576 suid=74 rport=56364 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994144.837:13110): pid=92575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=92576 suid=74 rport=56364 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994145.186:13111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994145.350:13112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994145.977:13113): pid=92575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92576 suid=74 rport=56364 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994145.978:13114): pid=92575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92576 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994145.978:13115): pid=92575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994145.979:13116): pid=92575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92575 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994145.979:13117): pid=92575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994146.787:13118): pid=92483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92562 suid=74 rport=58158 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994146.787:13119): pid=92483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92562 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994146.788:13120): pid=92483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994146.788:13121): pid=92483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92483 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994146.788:13122): pid=92483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994148.025:13123): pid=92847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994148.026:13124): pid=92797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=92847 suid=74 rport=58160 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994148.027:13125): pid=92797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=92847 suid=74 rport=58160 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994151.638:13126): pid=92797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92847 suid=74 rport=58160 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994151.638:13127): pid=92797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92847 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994151.639:13128): pid=92797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994151.639:13129): pid=92797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92797 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994151.639:13130): pid=92797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994152.715:13131): pid=92944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994152.716:13132): pid=92911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=92944 suid=74 rport=45564 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994152.716:13133): pid=92911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=92944 suid=74 rport=45564 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994157.182:13134): pid=92911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=92944 suid=74 rport=45564 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994157.183:13135): pid=92911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92944 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994157.185:13136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ERR msg=audit(1780994157.186:13137): pid=92911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994157.186:13138): pid=92911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=92911 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994157.186:13139): pid=92911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994157.189:13140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994157.294:13141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994157.430:13142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994158.391:13143): pid=93405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=93405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994158.392:13144): pid=93392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=93405 suid=74 rport=45568 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994158.392:13145): pid=93392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=93405 suid=74 rport=45568 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994161.823:13146): pid=93392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93405 suid=74 rport=45568 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994161.823:13147): pid=93392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=93405 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994161.823:13148): pid=93392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994161.824:13149): pid=93392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=93392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994161.824:13150): pid=93392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994162.718:13151): pid=93502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=93502 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994162.719:13152): pid=93493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=93502 suid=74 rport=55310 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994162.719:13153): pid=93493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=93502 suid=74 rport=55310 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994165.887:13154): pid=93493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93502 suid=74 rport=55310 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994165.887:13155): pid=93493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=93502 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994165.888:13156): pid=93493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994165.888:13157): pid=93493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=93493 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994165.888:13158): pid=93493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994165.906:13159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994165.911:13160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994166.011:13161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994166.041:13162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994166.169:13163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994166.264:13164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994166.280:13165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994166.713:13166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994166.950:13167): pid=93867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=93867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994166.951:13168): pid=93563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=93867 suid=74 rport=55320 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994166.951:13169): pid=93563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=93867 suid=74 rport=55320 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994169.239:13170): pid=93563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=93867 suid=74 rport=55320 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994169.240:13171): pid=93563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=93867 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994169.241:13172): pid=93563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994169.241:13173): pid=93563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=93563 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994169.242:13174): pid=93563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994169.868:13175): pid=94048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994169.869:13176): pid=94039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=94048 suid=74 rport=55322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994169.869:13177): pid=94039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=94048 suid=74 rport=55322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994172.143:13178): pid=94039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=94048 suid=74 rport=55322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994172.144:13179): pid=94039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94048 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994172.144:13180): pid=94039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994172.144:13181): pid=94039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994172.144:13182): pid=94039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994172.157:13183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994172.506:13184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994172.980:13185): pid=94155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994172.981:13186): pid=94139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=94155 suid=74 rport=57502 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994172.981:13187): pid=94139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=94155 suid=74 rport=57502 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994176.185:13188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994176.398:13189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994176.669:13190): pid=94139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=94155 suid=74 rport=57502 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994176.671:13191): pid=94139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94155 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994176.671:13192): pid=94139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994176.672:13193): pid=94139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994176.672:13194): pid=94139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994178.148:13195): pid=94441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94441 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994178.150:13196): pid=94382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=94441 suid=74 rport=57518 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994178.150:13197): pid=94382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=94441 suid=74 rport=57518 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994182.286:13198): pid=94382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=94441 suid=74 rport=57518 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994182.286:13199): pid=94382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94441 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994182.287:13200): pid=94382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994182.287:13201): pid=94382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994182.287:13202): pid=94382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994183.523:13203): pid=94715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94715 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994184.459:13204): pid=94706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=94715 suid=74 rport=59350 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994184.460:13205): pid=94706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=94715 suid=74 rport=59350 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994187.966:13206): pid=94706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=94715 suid=74 rport=59350 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994187.966:13207): pid=94706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94715 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994187.966:13208): pid=94706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994187.967:13209): pid=94706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994187.967:13210): pid=94706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994187.988:13211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994187.992:13212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994188.152:13213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994188.168:13214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994189.250:13215): pid=95012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=95012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994189.251:13216): pid=94993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=95012 suid=74 rport=59360 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994189.251:13217): pid=94993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=95012 suid=74 rport=59360 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994192.636:13218): pid=94993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=95012 suid=74 rport=59360 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994192.638:13219): pid=94993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=95012 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994192.638:13220): pid=94993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994192.638:13221): pid=94993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=94993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994192.638:13222): pid=94993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994195.258:13223): pid=95320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=95320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994195.259:13224): pid=95311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=95320 suid=74 rport=59334 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994195.259:13225): pid=95311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=95320 suid=74 rport=59334 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994196.187:13226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994196.190:13227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994196.285:13228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994196.336:13229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994196.435:13230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994196.501:13231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994197.181:13232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994197.622:13233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994198.445:13234): pid=95311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=95320 suid=74 rport=59334 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994198.446:13235): pid=95311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=95320 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994198.446:13236): pid=95311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994198.447:13237): pid=95311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=95311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994198.447:13238): pid=95311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994199.498:13239): pid=95761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=95761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994199.500:13240): pid=95758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=95761 suid=74 rport=59346 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994199.500:13241): pid=95758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=95761 suid=74 rport=59346 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994202.556:13242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994202.883:13243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994203.565:13244): pid=95758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=95761 suid=74 rport=59346 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994203.566:13245): pid=95758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=95761 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994203.567:13246): pid=95758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994203.567:13247): pid=95758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=95758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994203.567:13248): pid=95758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994204.413:13249): pid=95885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=95885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994204.414:13250): pid=95884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=95885 suid=74 rport=37054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994204.414:13251): pid=95884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=95885 suid=74 rport=37054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994207.173:13252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994207.329:13253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994207.648:13254): pid=95884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=95885 suid=74 rport=37054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994207.649:13255): pid=95884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=95885 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994207.649:13256): pid=95884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994207.650:13257): pid=95884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=95884 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994207.650:13258): pid=95884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994208.802:13259): pid=96348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=96348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994208.803:13260): pid=96339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=96348 suid=74 rport=37058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994208.804:13261): pid=96339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=96348 suid=74 rport=37058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994213.582:13262): pid=96339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=96348 suid=74 rport=37058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994213.583:13263): pid=96339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=96348 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994213.584:13264): pid=96339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994213.584:13265): pid=96339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=96339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994213.584:13266): pid=96339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994215.108:13267): pid=96456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=96456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994215.110:13268): pid=96439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=96456 suid=74 rport=36238 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994215.110:13269): pid=96439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=96456 suid=74 rport=36238 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994218.189:13270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994218.193:13271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994218.335:13272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994218.379:13273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994218.817:13274): pid=96439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=96456 suid=74 rport=36238 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994218.817:13275): pid=96439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=96456 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994218.818:13276): pid=96439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994218.818:13277): pid=96439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=96439 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994218.818:13278): pid=96439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994220.010:13279): pid=96911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=96911 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994220.011:13280): pid=96889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=96911 suid=74 rport=36252 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994220.011:13281): pid=96889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=96911 suid=74 rport=36252 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994223.861:13282): pid=96889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=96911 suid=74 rport=36252 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994223.861:13283): pid=96889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=96911 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994223.862:13284): pid=96889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994223.862:13285): pid=96889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=96889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994223.862:13286): pid=96889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994225.604:13287): pid=97014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97014 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994225.605:13288): pid=96997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=97014 suid=74 rport=48990 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994225.605:13289): pid=96997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=97014 suid=74 rport=48990 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994227.186:13290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994227.189:13291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994227.193:13292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994227.341:13293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994227.391:13294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994227.414:13295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994227.868:13296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994228.259:13297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994228.874:13298): pid=96997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=97014 suid=74 rport=48990 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994228.874:13299): pid=96997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97014 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994228.875:13300): pid=96997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994228.876:13301): pid=96997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=96997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994228.876:13302): pid=96997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994230.312:13303): pid=97403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97403 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994230.313:13304): pid=97345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=97403 suid=74 rport=49006 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994230.313:13305): pid=97345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=97403 suid=74 rport=49006 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994233.191:13306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994233.484:13307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994233.840:13308): pid=97345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=97403 suid=74 rport=49006 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994233.840:13309): pid=97345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97403 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994233.841:13310): pid=97345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994233.842:13311): pid=97345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994233.842:13312): pid=97345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994235.694:13313): pid=97664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994235.695:13314): pid=97647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=97664 suid=74 rport=59788 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994235.695:13315): pid=97647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=97664 suid=74 rport=59788 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994238.182:13316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994238.370:13317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994238.786:13318): pid=97647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=97664 suid=74 rport=59788 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994238.786:13319): pid=97647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97664 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994238.788:13320): pid=97647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994238.788:13321): pid=97647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994238.788:13322): pid=97647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994239.375:13323): pid=97936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97936 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994239.377:13324): pid=97933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=97936 suid=74 rport=59802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994239.377:13325): pid=97933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=97936 suid=74 rport=59802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994242.058:13326): pid=97933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=97936 suid=74 rport=59802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994242.058:13327): pid=97933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97936 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994242.059:13328): pid=97933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994242.059:13329): pid=97933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994242.059:13330): pid=97933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994243.190:13331): pid=98072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994243.191:13332): pid=97961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=98072 suid=74 rport=54418 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994243.191:13333): pid=97961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=98072 suid=74 rport=54418 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994245.793:13334): pid=97961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=98072 suid=74 rport=54418 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994245.794:13335): pid=97961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98072 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994245.795:13336): pid=97961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994245.795:13337): pid=97961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=97961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994245.795:13338): pid=97961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994247.498:13339): pid=98398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994247.500:13340): pid=98225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=98398 suid=74 rport=54426 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994247.500:13341): pid=98225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=98398 suid=74 rport=54426 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994249.182:13342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994249.184:13343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994249.301:13344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994249.363:13345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994252.248:13346): pid=98225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=98398 suid=74 rport=54426 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994252.249:13347): pid=98225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98398 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994252.249:13348): pid=98225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994252.250:13349): pid=98225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994252.250:13350): pid=98225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994254.496:13351): pid=98627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994254.497:13352): pid=98618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=98627 suid=74 rport=37926 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994254.498:13353): pid=98618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=98627 suid=74 rport=37926 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994255.464:13354): pid=98637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994255.725:13355): pid=98636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=98637 suid=74 rport=54282 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994255.725:13356): pid=98636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=98637 suid=74 rport=54282 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994255.992:13357): pid=98696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98696 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994256.083:13358): pid=98695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=98696 suid=74 rport=20342 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994256.083:13359): pid=98695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=98696 suid=74 rport=20342 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994256.636:13360): pid=98695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=98696 suid=74 rport=20342 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994256.637:13361): pid=98695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98696 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994256.638:13362): pid=98695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.147 addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994256.638:13363): pid=98695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994256.638:13364): pid=98695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994257.129:13365): pid=98946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780994257.133:13366): pid=98636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=98637 suid=74 rport=54282 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994257.134:13367): pid=98636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98637 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994257.134:13368): pid=98636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994257.135:13369): pid=98636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98636 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994257.135:13370): pid=98636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780994257.333:13371): pid=98945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=98946 suid=74 rport=43516 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994257.333:13372): pid=98945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=98946 suid=74 rport=43516 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994257.648:13373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994257.651:13374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994257.655:13375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994257.748:13376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994257.885:13377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994257.943:13378): pid=98618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=98627 suid=74 rport=37926 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994257.944:13379): pid=98618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98627 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994257.944:13380): pid=98618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994257.945:13381): pid=98618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994257.945:13382): pid=98618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994257.966:13383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994258.431:13384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994258.451:13385): pid=98945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=98946 suid=74 rport=43516 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994258.451:13386): pid=98945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98946 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994258.452:13387): pid=98945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994258.452:13388): pid=98945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=98945 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994258.452:13389): pid=98945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994258.904:13390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994258.957:13391): pid=99238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994258.958:13392): pid=99211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=99238 suid=74 rport=37942 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994258.959:13393): pid=99211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=99238 suid=74 rport=37942 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994261.816:13394): pid=99211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=99238 suid=74 rport=37942 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994261.816:13395): pid=99211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99238 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994261.817:13396): pid=99211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994261.818:13397): pid=99211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994261.818:13398): pid=99211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994262.858:13399): pid=99274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99274 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994262.859:13400): pid=99265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=99274 suid=74 rport=48808 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994262.859:13401): pid=99265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=99274 suid=74 rport=48808 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994264.182:13402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994264.497:13403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994266.074:13404): pid=99265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=99274 suid=74 rport=48808 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994266.075:13405): pid=99265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99274 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994266.075:13406): pid=99265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994266.076:13407): pid=99265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994266.076:13408): pid=99265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994269.079:13409): pid=99663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994269.081:13410): pid=99388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=99663 suid=74 rport=48812 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994269.081:13411): pid=99388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=99663 suid=74 rport=48812 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994269.185:13412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994269.374:13413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994272.742:13414): pid=99388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=99663 suid=74 rport=48812 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994272.743:13415): pid=99388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99663 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994272.743:13416): pid=99388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994272.744:13417): pid=99388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99388 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994272.744:13418): pid=99388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994273.744:13419): pid=99923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99923 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994274.693:13420): pid=99861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=99923 suid=74 rport=48058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994274.694:13421): pid=99861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=99923 suid=74 rport=48058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994276.477:13422): pid=99861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=99923 suid=74 rport=48058 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994276.477:13423): pid=99861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99923 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994276.478:13424): pid=99861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994276.479:13425): pid=99861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994276.479:13426): pid=99861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994277.054:13427): pid=100031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=100031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994277.055:13428): pid=99948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=100031 suid=74 rport=48064 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994277.055:13429): pid=99948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=100031 suid=74 rport=48064 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994279.136:13430): pid=99948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100031 suid=74 rport=48064 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994279.136:13431): pid=99948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=100031 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994279.137:13432): pid=99948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994279.138:13433): pid=99948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=99948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994279.138:13434): pid=99948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994280.191:13435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994280.195:13436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994280.309:13437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994280.369:13438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994282.059:13439): pid=100298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=100298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994282.060:13440): pid=100173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=100298 suid=74 rport=41768 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994282.062:13441): pid=100173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=100298 suid=74 rport=41768 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994285.906:13442): pid=100173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100298 suid=74 rport=41768 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994285.907:13443): pid=100173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=100298 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994285.908:13444): pid=100173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994285.908:13445): pid=100173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=100173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994285.908:13446): pid=100173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994286.770:13447): pid=100505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=100505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994286.770:13448): pid=100496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=100505 suid=74 rport=41784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994286.770:13449): pid=100496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=100505 suid=74 rport=41784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994288.189:13450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994288.192:13451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994288.196:13452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994288.340:13453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994288.430:13454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994288.483:13455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994289.182:13456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994289.588:13457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994290.312:13458): pid=100496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100505 suid=74 rport=41784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994290.313:13459): pid=100496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=100505 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994290.314:13460): pid=100496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994290.315:13461): pid=100496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=100496 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994290.315:13462): pid=100496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994291.482:13463): pid=100842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=100842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994291.483:13464): pid=100833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=100842 suid=74 rport=33296 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994291.484:13465): pid=100833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=100842 suid=74 rport=33296 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994294.769:13466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994295.120:13467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994295.887:13468): pid=100833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=100842 suid=74 rport=33296 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994295.887:13469): pid=100833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=100842 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994295.888:13470): pid=100833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994295.888:13471): pid=100833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=100833 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994295.888:13472): pid=100833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994297.121:13473): pid=101232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101232 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994297.123:13474): pid=101130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=101232 suid=74 rport=33298 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994297.123:13475): pid=101130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=101232 suid=74 rport=33298 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994300.158:13476): pid=101130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=101232 suid=74 rport=33298 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994300.158:13477): pid=101130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101232 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994300.159:13478): pid=101130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994300.159:13479): pid=101130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994300.159:13480): pid=101130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994300.179:13481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994300.375:13482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994301.264:13483): pid=101430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994301.266:13484): pid=101421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=101430 suid=74 rport=56088 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994301.266:13485): pid=101421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=101430 suid=74 rport=56088 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994304.166:13486): pid=101421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=101430 suid=74 rport=56088 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994304.167:13487): pid=101421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101430 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994304.167:13488): pid=101421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994304.167:13489): pid=101421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101421 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994304.167:13490): pid=101421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994305.502:13491): pid=101517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994305.503:13492): pid=101508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=101517 suid=74 rport=56104 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994305.503:13493): pid=101508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=101517 suid=74 rport=56104 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994309.323:13494): pid=101508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=101517 suid=74 rport=56104 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994309.323:13495): pid=101508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101517 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994309.324:13496): pid=101508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994309.325:13497): pid=101508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994309.325:13498): pid=101508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994310.061:13499): pid=101935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101935 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994310.062:13500): pid=101930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=101935 suid=74 rport=41360 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994310.062:13501): pid=101930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=101935 suid=74 rport=41360 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994311.181:13502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994311.185:13503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994311.363:13504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994311.376:13505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994312.900:13506): pid=101930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=101935 suid=74 rport=41360 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994312.900:13507): pid=101930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101935 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994312.901:13508): pid=101930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994312.901:13509): pid=101930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=101930 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994312.901:13510): pid=101930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994313.852:13511): pid=102099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=102099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994313.854:13512): pid=102037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=102099 suid=74 rport=41374 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994313.854:13513): pid=102037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=102099 suid=74 rport=41374 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994317.184:13514): pid=102037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=102099 suid=74 rport=41374 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994317.185:13515): pid=102037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=102099 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994317.186:13516): pid=102037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994317.186:13517): pid=102037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=102037 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994317.186:13518): pid=102037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994318.505:13519): pid=102436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=102436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994318.506:13520): pid=102220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=102436 suid=74 rport=41382 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994318.507:13521): pid=102220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=102436 suid=74 rport=41382 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994318.690:13522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994318.695:13523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994318.699:13524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994318.792:13525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994318.930:13526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994318.987:13527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994320.183:13528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994320.641:13529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994322.393:13530): pid=102220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=102436 suid=74 rport=41382 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994322.393:13531): pid=102220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=102436 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994322.394:13532): pid=102220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994322.395:13533): pid=102220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=102220 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994322.395:13534): pid=102220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994325.186:13535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994325.264:13536): pid=102832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=102832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994325.266:13537): pid=102804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=102832 suid=74 rport=36236 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994325.266:13538): pid=102804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=102832 suid=74 rport=36236 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780994325.488:13539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994329.092:13540): pid=102804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=102832 suid=74 rport=36236 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994329.093:13541): pid=102804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=102832 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994329.094:13542): pid=102804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994329.095:13543): pid=102804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=102804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994329.095:13544): pid=102804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994330.341:13545): pid=103099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994330.342:13546): pid=103090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=103099 suid=74 rport=36256 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994330.342:13547): pid=103090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=103099 suid=74 rport=36256 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994331.186:13548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994331.357:13549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994334.708:13550): pid=103090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=103099 suid=74 rport=36256 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994334.708:13551): pid=103090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103099 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994334.709:13552): pid=103090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994334.709:13553): pid=103090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994334.709:13554): pid=103090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994335.922:13555): pid=103412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994335.923:13556): pid=103392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=103412 suid=74 rport=51050 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994335.923:13557): pid=103392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=103412 suid=74 rport=51050 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994338.584:13558): pid=103392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=103412 suid=74 rport=51050 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994338.585:13559): pid=103392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103412 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994338.586:13560): pid=103392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994338.586:13561): pid=103392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994338.587:13562): pid=103392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994340.438:13563): pid=103661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994340.440:13564): pid=103642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=103661 suid=74 rport=51056 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994340.440:13565): pid=103642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=103661 suid=74 rport=51056 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994342.185:13566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994342.189:13567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994342.353:13568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994342.380:13569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994345.703:13570): pid=103642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=103661 suid=74 rport=51056 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994345.704:13571): pid=103642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103661 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994345.704:13572): pid=103642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994345.705:13573): pid=103642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994345.705:13574): pid=103642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994346.283:13575): pid=103843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994346.285:13576): pid=103805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=103843 suid=74 rport=36512 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994346.285:13577): pid=103805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=103843 suid=74 rport=36512 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994347.938:13578): pid=103805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=103843 suid=74 rport=36512 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994347.938:13579): pid=103805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103843 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994347.939:13580): pid=103805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994347.939:13581): pid=103805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=103805 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994347.940:13582): pid=103805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994348.560:13583): pid=104202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=104202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994348.561:13584): pid=104146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=104202 suid=74 rport=36528 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994348.562:13585): pid=104146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=104202 suid=74 rport=36528 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994349.187:13586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994349.190:13587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994349.193:13588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994349.335:13589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994349.440:13590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994349.455:13591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994351.182:13592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994351.596:13593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994353.102:13594): pid=104146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=104202 suid=74 rport=36528 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994353.103:13595): pid=104146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=104202 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994353.103:13596): pid=104146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994353.104:13597): pid=104146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=104146 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994353.104:13598): pid=104146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994355.946:13599): pid=104415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=104415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994355.947:13600): pid=104337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=104415 suid=74 rport=46712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994355.947:13601): pid=104337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=104415 suid=74 rport=46712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994356.181:13602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994356.478:13603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994361.470:13604): pid=104337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=104415 suid=74 rport=46712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994361.470:13605): pid=104337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=104415 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994361.470:13606): pid=104337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994361.471:13607): pid=104337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=104337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994361.471:13608): pid=104337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994361.493:13609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994361.686:13610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994362.227:13611): pid=104918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=104918 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994362.229:13612): pid=104894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=104918 suid=74 rport=36052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994362.229:13613): pid=104894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=104918 suid=74 rport=36052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994366.959:13614): pid=104894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=104918 suid=74 rport=36052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994366.959:13615): pid=104894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=104918 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994366.960:13616): pid=104894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994366.960:13617): pid=104894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=104894 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994366.960:13618): pid=104894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994367.962:13619): pid=105159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994367.964:13620): pid=105012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=105159 suid=74 rport=36062 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994367.964:13621): pid=105012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=105159 suid=74 rport=36062 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994371.048:13622): pid=105012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=105159 suid=74 rport=36062 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994371.049:13623): pid=105012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105159 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994371.050:13624): pid=105012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994371.050:13625): pid=105012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994371.050:13626): pid=105012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994372.615:13627): pid=105408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994372.616:13628): pid=105289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=105408 suid=74 rport=54392 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994372.616:13629): pid=105289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=105408 suid=74 rport=54392 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994373.231:13630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994373.234:13631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994373.410:13632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994373.433:13633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994375.822:13634): pid=105591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994376.020:13635): pid=105590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=105591 suid=74 rport=41408 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994376.020:13636): pid=105590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=105591 suid=74 rport=41408 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994376.392:13637): pid=105289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=105408 suid=74 rport=54392 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994376.393:13638): pid=105289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105408 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994376.393:13639): pid=105289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994376.394:13640): pid=105289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994376.394:13641): pid=105289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994377.122:13642): pid=105590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=105591 suid=74 rport=41408 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994377.122:13643): pid=105590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105591 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994377.123:13644): pid=105590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994377.124:13645): pid=105590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994377.124:13646): pid=105590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994377.463:13647): pid=105609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994377.464:13648): pid=105600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=105609 suid=74 rport=54398 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994377.464:13649): pid=105600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=105609 suid=74 rport=54398 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994378.395:13650): pid=105885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994378.664:13651): pid=105883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=105885 suid=74 rport=38412 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994378.665:13652): pid=105883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=105885 suid=74 rport=38412 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994379.431:13653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994379.531:13654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994379.535:13655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994379.676:13656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994379.713:13657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994379.761:13658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994380.013:13659): pid=105600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=105609 suid=74 rport=54398 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994380.014:13660): pid=105600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105609 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994380.015:13661): pid=105600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994380.015:13662): pid=105600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994380.016:13663): pid=105600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994380.084:13664): pid=105883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=105885 suid=74 rport=38412 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994380.085:13665): pid=105883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105885 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994380.086:13666): pid=105883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994380.086:13667): pid=105883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=105883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994380.086:13668): pid=105883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994380.521:13669): pid=106016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994380.523:13670): pid=106007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=106016 suid=74 rport=51166 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994380.523:13671): pid=106007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=106016 suid=74 rport=51166 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994381.917:13672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994382.307:13673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994382.357:13674): pid=106007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106016 suid=74 rport=51166 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994382.358:13675): pid=106007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106016 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994382.358:13676): pid=106007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994382.359:13677): pid=106007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106007 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994382.359:13678): pid=106007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994382.839:13679): pid=106061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994382.841:13680): pid=106059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=106061 suid=74 rport=51174 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994382.841:13681): pid=106059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=106061 suid=74 rport=51174 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994385.341:13682): pid=106059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106061 suid=74 rport=51174 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994385.341:13683): pid=106059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106061 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994385.342:13684): pid=106059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994385.342:13685): pid=106059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994385.342:13686): pid=106059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994385.743:13687): pid=106250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994386.918:13688): pid=106241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=106250 suid=74 rport=51176 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994386.918:13689): pid=106241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=106250 suid=74 rport=51176 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994387.183:13690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994387.478:13691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994390.328:13692): pid=106241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106250 suid=74 rport=51176 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994390.329:13693): pid=106241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106250 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994390.329:13694): pid=106241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994390.330:13695): pid=106241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994390.330:13696): pid=106241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994391.197:13697): pid=106597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994391.198:13698): pid=106588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=106597 suid=74 rport=46128 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994391.198:13699): pid=106588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=106597 suid=74 rport=46128 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994392.181:13700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994392.310:13701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994394.155:13702): pid=106588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106597 suid=74 rport=46128 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994394.155:13703): pid=106588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106597 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994394.156:13704): pid=106588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994394.157:13705): pid=106588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994394.157:13706): pid=106588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994396.213:13707): pid=106729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994396.215:13708): pid=106720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=106729 suid=74 rport=46138 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994396.215:13709): pid=106720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=106729 suid=74 rport=46138 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994399.136:13710): pid=106720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=106729 suid=74 rport=46138 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994399.136:13711): pid=106720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106729 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994399.137:13712): pid=106720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994399.138:13713): pid=106720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=106720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994399.138:13714): pid=106720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994400.411:13715): pid=107147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107147 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994400.412:13716): pid=107134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=107147 suid=74 rport=46146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994400.413:13717): pid=107134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=107147 suid=74 rport=46146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994403.970:13718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994403.974:13719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994404.162:13720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994404.217:13721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994404.942:13722): pid=107134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=107147 suid=74 rport=46146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994404.942:13723): pid=107134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107147 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994404.943:13724): pid=107134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994404.943:13725): pid=107134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994404.943:13726): pid=107134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994406.302:13727): pid=107291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994406.303:13728): pid=107282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=107291 suid=74 rport=47024 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994406.303:13729): pid=107282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=107291 suid=74 rport=47024 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994409.598:13730): pid=107282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=107291 suid=74 rport=47024 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994409.599:13731): pid=107282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107291 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994409.599:13732): pid=107282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994409.599:13733): pid=107282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107282 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994409.599:13734): pid=107282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994410.187:13735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994410.190:13736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994410.193:13737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994410.374:13738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994410.393:13739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994410.438:13740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994410.623:13741): pid=107669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994410.624:13742): pid=107527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=107669 suid=74 rport=50838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994410.624:13743): pid=107527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=107669 suid=74 rport=50838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994413.191:13744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994413.580:13745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994414.970:13746): pid=107527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=107669 suid=74 rport=50838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994414.971:13747): pid=107527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107669 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994414.972:13748): pid=107527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994414.972:13749): pid=107527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994414.972:13750): pid=107527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994416.156:13751): pid=107904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994416.158:13752): pid=107895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=107904 suid=74 rport=50840 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994416.158:13753): pid=107895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=107904 suid=74 rport=50840 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994418.182:13754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994418.496:13755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994419.384:13756): pid=107895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=107904 suid=74 rport=50840 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994419.384:13757): pid=107895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107904 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994419.385:13758): pid=107895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994419.385:13759): pid=107895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=107895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994419.385:13760): pid=107895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994420.239:13761): pid=108175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=108175 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994420.240:13762): pid=108174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=108175 suid=74 rport=50886 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994420.241:13763): pid=108174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=108175 suid=74 rport=50886 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994422.385:13764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994422.554:13765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994423.672:13766): pid=108174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=108175 suid=74 rport=50886 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994423.673:13767): pid=108174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=108175 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994423.673:13768): pid=108174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994423.674:13769): pid=108174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=108174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994423.674:13770): pid=108174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994426.109:13771): pid=108495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=108495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994426.110:13772): pid=108486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=108495 suid=74 rport=50896 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994426.110:13773): pid=108486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=108495 suid=74 rport=50896 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994432.908:13774): pid=108486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=108495 suid=74 rport=50896 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994432.909:13775): pid=108486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=108495 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994432.909:13776): pid=108486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994432.910:13777): pid=108486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=108486 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994432.910:13778): pid=108486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994434.181:13779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994434.225:13780): pid=108816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=108816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994434.226:13781): pid=108795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=108816 suid=74 rport=45222 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994434.226:13782): pid=108795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=108816 suid=74 rport=45222 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994434.286:13783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994434.349:13784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994434.438:13785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994437.164:13786): pid=108795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=108816 suid=74 rport=45222 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994437.164:13787): pid=108795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=108816 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994437.165:13788): pid=108795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994437.165:13789): pid=108795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=108795 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994437.165:13790): pid=108795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994438.917:13791): pid=109411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=109411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994438.918:13792): pid=109086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=109411 suid=74 rport=45226 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994438.918:13793): pid=109086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=109411 suid=74 rport=45226 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994441.049:13794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994441.052:13795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994441.055:13796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994441.240:13797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994441.273:13798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994441.421:13799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994442.048:13800): pid=109086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=109411 suid=74 rport=45226 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994442.049:13801): pid=109086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=109411 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994442.050:13802): pid=109086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994442.050:13803): pid=109086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=109086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994442.050:13804): pid=109086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994443.019:13805): pid=109516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=109516 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994443.020:13806): pid=109515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=109516 suid=74 rport=41268 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994443.020:13807): pid=109515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=109516 suid=74 rport=41268 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994444.181:13808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994444.597:13809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994447.009:13810): pid=109515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=109516 suid=74 rport=41268 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994447.010:13811): pid=109515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=109516 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994447.011:13812): pid=109515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994447.011:13813): pid=109515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=109515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994447.011:13814): pid=109515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994448.365:13815): pid=109818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=109818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994448.366:13816): pid=109637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=109818 suid=74 rport=41272 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994448.366:13817): pid=109637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=109818 suid=74 rport=41272 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994449.193:13818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994449.480:13819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994451.487:13820): pid=109637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=109818 suid=74 rport=41272 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994451.487:13821): pid=109637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=109818 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994451.488:13822): pid=109637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994451.489:13823): pid=109637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=109637 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994451.489:13824): pid=109637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994452.258:13825): pid=110086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994452.259:13826): pid=110085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=110086 suid=74 rport=33826 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994452.259:13827): pid=110085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=110086 suid=74 rport=33826 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994453.180:13828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994453.358:13829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994453.944:13830): pid=110085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110086 suid=74 rport=33826 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994453.944:13831): pid=110085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110086 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994453.944:13832): pid=110085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994453.945:13833): pid=110085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994453.945:13834): pid=110085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994454.535:13835): pid=110151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110151 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994454.536:13836): pid=110142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=110151 suid=74 rport=33828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994454.536:13837): pid=110142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=110151 suid=74 rport=33828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994457.495:13838): pid=110142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110151 suid=74 rport=33828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994457.495:13839): pid=110142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110151 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994457.495:13840): pid=110142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994457.496:13841): pid=110142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994457.496:13842): pid=110142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994458.953:13843): pid=110402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994458.955:13844): pid=110229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=110402 suid=74 rport=33838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994458.955:13845): pid=110229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=110402 suid=74 rport=33838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994464.177:13846): pid=110229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110402 suid=74 rport=33838 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994464.177:13847): pid=110229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110402 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994464.178:13848): pid=110229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994464.178:13849): pid=110229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994464.178:13850): pid=110229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994464.796:13851): pid=110672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994465.092:13852): pid=110663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=110672 suid=74 rport=55954 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994465.092:13853): pid=110663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=110672 suid=74 rport=55954 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994465.180:13854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994465.184:13855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994465.377:13856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994465.387:13857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994467.481:13858): pid=110663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=110672 suid=74 rport=55954 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994467.482:13859): pid=110663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110672 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994467.482:13860): pid=110663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994467.483:13861): pid=110663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994467.483:13862): pid=110663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994469.131:13863): pid=111003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=111003 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994469.132:13864): pid=110871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=111003 suid=74 rport=55960 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994469.132:13865): pid=110871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=111003 suid=74 rport=55960 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994471.700:13866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994471.704:13867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994471.707:13868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994471.813:13869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994471.820:13870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994471.903:13871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994473.119:13872): pid=110871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=111003 suid=74 rport=55960 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994473.120:13873): pid=110871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=111003 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994473.120:13874): pid=110871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994473.120:13875): pid=110871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=110871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994473.120:13876): pid=110871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994474.389:13877): pid=111166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=111166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994474.390:13878): pid=111108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=111166 suid=74 rport=58446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994474.391:13879): pid=111108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=111166 suid=74 rport=58446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994475.191:13880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994475.629:13881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994478.481:13882): pid=111108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=111166 suid=74 rport=58446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994478.482:13883): pid=111108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=111166 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994478.483:13884): pid=111108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994478.483:13885): pid=111108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=111108 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994478.483:13886): pid=111108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994480.186:13887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994480.480:13888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994480.817:13889): pid=111661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=111661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994480.819:13890): pid=111572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=111661 suid=74 rport=58454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994480.819:13891): pid=111572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=111661 suid=74 rport=58454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994483.841:13892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994484.098:13893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994484.781:13894): pid=111572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=111661 suid=74 rport=58454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994484.782:13895): pid=111572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=111661 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994484.782:13896): pid=111572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994484.783:13897): pid=111572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=111572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994484.783:13898): pid=111572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994485.854:13899): pid=111796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=111796 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994485.855:13900): pid=111742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=111796 suid=74 rport=45110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994485.856:13901): pid=111742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=111796 suid=74 rport=45110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994488.375:13902): pid=111742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=111796 suid=74 rport=45110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994488.375:13903): pid=111742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=111796 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994488.376:13904): pid=111742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994488.376:13905): pid=111742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=111742 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994488.376:13906): pid=111742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994489.102:13907): pid=112164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994489.104:13908): pid=112110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=112164 suid=74 rport=45114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994489.104:13909): pid=112110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=112164 suid=74 rport=45114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994492.320:13910): pid=112110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=112164 suid=74 rport=45114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994492.321:13911): pid=112110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112164 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994492.322:13912): pid=112110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994492.322:13913): pid=112110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994492.322:13914): pid=112110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994493.292:13915): pid=112284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780994493.652:13916): pid=112286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994493.852:13917): pid=112285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=112286 suid=74 rport=60578 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994493.852:13918): pid=112285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=112286 suid=74 rport=60578 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994494.950:13919): pid=112285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=112286 suid=74 rport=60578 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994494.950:13920): pid=112285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112286 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994494.950:13921): pid=112285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994494.951:13922): pid=112285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112285 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994494.951:13923): pid=112285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780994495.331:13924): pid=112275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=112284 suid=74 rport=34756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994495.331:13925): pid=112275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=112284 suid=74 rport=34756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994496.182:13926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994496.185:13927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994496.370:13928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994496.424:13929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994499.063:13930): pid=112275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=112284 suid=74 rport=34756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994499.063:13931): pid=112275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112284 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994499.064:13932): pid=112275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994499.064:13933): pid=112275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994499.064:13934): pid=112275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994500.428:13935): pid=112817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112817 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994500.430:13936): pid=112723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=112817 suid=74 rport=34764 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994500.430:13937): pid=112723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=112817 suid=74 rport=34764 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994502.184:13938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994502.187:13939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994502.189:13940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994502.338:13941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994502.428:13942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994502.472:13943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994503.306:13944): pid=112723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=112817 suid=74 rport=34764 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994503.306:13945): pid=112723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112817 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994503.306:13946): pid=112723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994503.307:13947): pid=112723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994503.307:13948): pid=112723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994504.351:13949): pid=113004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994504.353:13950): pid=112995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=113004 suid=74 rport=41088 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994504.353:13951): pid=112995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=113004 suid=74 rport=41088 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994506.182:13952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994506.599:13953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994507.005:13954): pid=113110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994507.277:13955): pid=113109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=113110 suid=74 rport=50782 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994507.278:13956): pid=113109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=113110 suid=74 rport=50782 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994508.551:13957): pid=112995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=113004 suid=74 rport=41088 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994508.551:13958): pid=112995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113004 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994508.552:13959): pid=112995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994508.552:13960): pid=112995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=112995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994508.552:13961): pid=112995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994508.760:13962): pid=113109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=113110 suid=74 rport=50782 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994508.760:13963): pid=113109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113110 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994508.761:13964): pid=113109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994508.762:13965): pid=113109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994508.762:13966): pid=113109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994509.807:13967): pid=113343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994509.809:13968): pid=113250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=113343 suid=74 rport=41096 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994509.809:13969): pid=113250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=113343 suid=74 rport=41096 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994511.182:13970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994511.480:13971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994514.145:13972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994514.324:13973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994515.344:13974): pid=113250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=113343 suid=74 rport=41096 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994515.345:13975): pid=113250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113343 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994515.345:13976): pid=113250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994515.346:13977): pid=113250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994515.346:13978): pid=113250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994517.312:13979): pid=113700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994517.314:13980): pid=113691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=113700 suid=74 rport=56454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994517.314:13981): pid=113691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=113700 suid=74 rport=56454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994520.047:13982): pid=113691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=113700 suid=74 rport=56454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994520.047:13983): pid=113691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113700 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994520.048:13984): pid=113691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994520.048:13985): pid=113691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994520.048:13986): pid=113691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994520.622:13987): pid=113933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994520.624:13988): pid=113932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=113933 suid=74 rport=56152 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994520.624:13989): pid=113932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=113933 suid=74 rport=56152 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994522.280:13990): pid=113932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=113933 suid=74 rport=56152 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994522.280:13991): pid=113932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113933 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994522.281:13992): pid=113932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994522.282:13993): pid=113932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113932 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994522.282:13994): pid=113932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994522.722:13995): pid=113951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994522.723:13996): pid=113950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=113951 suid=74 rport=56166 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994522.724:13997): pid=113950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=113951 suid=74 rport=56166 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994524.798:13998): pid=113950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=113951 suid=74 rport=56166 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994524.798:13999): pid=113950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113951 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994524.798:14000): pid=113950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994524.799:14001): pid=113950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994524.799:14002): pid=113950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994526.449:14003): pid=114148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=114148 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994526.451:14004): pid=113968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=114148 suid=74 rport=56172 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994526.451:14005): pid=113968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=114148 suid=74 rport=56172 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994527.186:14006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994527.189:14007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994527.403:14008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994527.419:14009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994531.024:14010): pid=113968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=114148 suid=74 rport=56172 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994531.024:14011): pid=113968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=114148 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994531.025:14012): pid=113968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994531.025:14013): pid=113968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=113968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994531.025:14014): pid=113968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994532.214:14015): pid=114509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=114509 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994532.215:14016): pid=114500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=114509 suid=74 rport=41758 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994532.215:14017): pid=114500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=114509 suid=74 rport=41758 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994533.182:14018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994533.185:14019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994533.189:14020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994533.402:14021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994533.438:14022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994533.561:14023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994535.626:14024): pid=114500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=114509 suid=74 rport=41758 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994535.626:14025): pid=114500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=114509 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994535.627:14026): pid=114500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994535.627:14027): pid=114500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=114500 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994535.627:14028): pid=114500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994536.864:14029): pid=114663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=114663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994536.866:14030): pid=114609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=114663 suid=74 rport=41774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994536.866:14031): pid=114609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=114663 suid=74 rport=41774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994537.188:14032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994537.623:14033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994541.084:14034): pid=114609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=114663 suid=74 rport=41774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994541.084:14035): pid=114609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=114663 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994541.085:14036): pid=114609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994541.086:14037): pid=114609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=114609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994541.086:14038): pid=114609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994542.096:14039): pid=115117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115117 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994542.097:14040): pid=115108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=115117 suid=74 rport=39604 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994542.097:14041): pid=115108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=115117 suid=74 rport=39604 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994542.180:14042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994542.441:14043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994545.181:14044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994545.369:14045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994546.148:14046): pid=115108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=115117 suid=74 rport=39604 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994546.148:14047): pid=115108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115117 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994546.149:14048): pid=115108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994546.149:14049): pid=115108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115108 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994546.149:14050): pid=115108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994547.433:14051): pid=115281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115281 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994547.434:14052): pid=115272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=115281 suid=74 rport=39608 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994547.434:14053): pid=115272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=115281 suid=74 rport=39608 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994550.759:14054): pid=115272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=115281 suid=74 rport=39608 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994550.759:14055): pid=115272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115281 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994550.759:14056): pid=115272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994550.760:14057): pid=115272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115272 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994550.760:14058): pid=115272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994553.242:14059): pid=115752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115752 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994553.243:14060): pid=115570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=115752 suid=74 rport=57046 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994553.243:14061): pid=115570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=115752 suid=74 rport=57046 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994555.659:14062): pid=115570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=115752 suid=74 rport=57046 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994555.660:14063): pid=115570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115752 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994555.660:14064): pid=115570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994555.661:14065): pid=115570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115570 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994555.661:14066): pid=115570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994556.909:14067): pid=115839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994556.910:14068): pid=115789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=115839 suid=74 rport=57052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994556.910:14069): pid=115789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=115839 suid=74 rport=57052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994558.183:14070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994558.186:14071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994558.357:14072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994558.403:14073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994559.277:14074): pid=115789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=115839 suid=74 rport=57052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994559.278:14075): pid=115789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115839 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994559.279:14076): pid=115789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994559.280:14077): pid=115789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=115789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994559.280:14078): pid=115789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994560.256:14079): pid=116329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=116329 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994560.257:14080): pid=116159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=116329 suid=74 rport=57054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994560.258:14081): pid=116159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=116329 suid=74 rport=57054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994564.045:14082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994564.049:14083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994564.052:14084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994564.196:14085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994564.274:14086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994564.324:14087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994564.978:14088): pid=116159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=116329 suid=74 rport=57054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994564.978:14089): pid=116159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=116329 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994564.979:14090): pid=116159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994564.979:14091): pid=116159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=116159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994564.979:14092): pid=116159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994565.772:14093): pid=116673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=116673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994565.773:14094): pid=116663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=116673 suid=74 rport=45420 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994565.773:14095): pid=116663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=116673 suid=74 rport=45420 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994568.182:14096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994568.593:14097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994571.392:14098): pid=116663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=116673 suid=74 rport=45420 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994571.393:14099): pid=116663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=116673 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994571.393:14100): pid=116663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994571.394:14101): pid=116663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=116663 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994571.394:14102): pid=116663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994572.650:14103): pid=117020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117020 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994572.652:14104): pid=117011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=117020 suid=74 rport=33216 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994572.652:14105): pid=117011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=117020 suid=74 rport=33216 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994573.181:14106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994573.475:14107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994575.484:14108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994575.643:14109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994576.249:14110): pid=117011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=117020 suid=74 rport=33216 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994576.249:14111): pid=117011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117020 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994576.250:14112): pid=117011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994576.250:14113): pid=117011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994576.250:14114): pid=117011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994577.279:14115): pid=117265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994577.280:14116): pid=117223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=117265 suid=74 rport=33224 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994577.280:14117): pid=117223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=117265 suid=74 rport=33224 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994581.090:14118): pid=117223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=117265 suid=74 rport=33224 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994581.091:14119): pid=117223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117265 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994581.091:14120): pid=117223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994581.092:14121): pid=117223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994581.092:14122): pid=117223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994582.056:14123): pid=117601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117601 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994582.057:14124): pid=117592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=117601 suid=74 rport=56884 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994582.057:14125): pid=117592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=117601 suid=74 rport=56884 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994584.956:14126): pid=117592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=117601 suid=74 rport=56884 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994584.956:14127): pid=117592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117601 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994584.956:14128): pid=117592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994584.957:14129): pid=117592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117592 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994584.957:14130): pid=117592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994585.884:14131): pid=117635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994585.886:14132): pid=117626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=117635 suid=74 rport=56898 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994585.886:14133): pid=117626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=117635 suid=74 rport=56898 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994589.184:14134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994589.186:14135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994589.359:14136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994589.373:14137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994590.219:14138): pid=117626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=117635 suid=74 rport=56898 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994590.219:14139): pid=117626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117635 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994590.220:14140): pid=117626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994590.221:14141): pid=117626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=117626 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994590.221:14142): pid=117626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994590.808:14143): pid=118086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994590.809:14144): pid=118073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=118086 suid=74 rport=60622 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994590.809:14145): pid=118073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=118086 suid=74 rport=60622 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994592.988:14146): pid=118073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=118086 suid=74 rport=60622 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994592.988:14147): pid=118073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118086 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994592.989:14148): pid=118073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994592.989:14149): pid=118073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994592.989:14150): pid=118073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994593.455:14151): pid=118167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994593.456:14152): pid=118166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=118167 suid=74 rport=60638 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994593.456:14153): pid=118166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=118167 suid=74 rport=60638 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994595.182:14154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994595.186:14155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994595.189:14156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994595.326:14157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994595.356:14158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994595.479:14159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994596.492:14160): pid=118166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=118167 suid=74 rport=60638 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994596.492:14161): pid=118166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118167 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994596.493:14162): pid=118166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994596.493:14163): pid=118166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994596.493:14164): pid=118166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994597.586:14165): pid=118323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118323 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994597.587:14166): pid=118321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=118323 suid=74 rport=60650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994597.588:14167): pid=118321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=118323 suid=74 rport=60650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994599.189:14168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994599.538:14169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994602.657:14170): pid=118321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=118323 suid=74 rport=60650 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994602.658:14171): pid=118321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118323 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994602.658:14172): pid=118321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994602.658:14173): pid=118321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994602.658:14174): pid=118321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994603.751:14175): pid=118722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994603.753:14176): pid=118660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=118722 suid=74 rport=48152 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994603.753:14177): pid=118660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=118722 suid=74 rport=48152 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994604.180:14178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994604.497:14179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994606.126:14180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994606.297:14181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994606.930:14182): pid=118660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=118722 suid=74 rport=48152 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994606.930:14183): pid=118660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118722 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994606.931:14184): pid=118660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994606.932:14185): pid=118660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994606.932:14186): pid=118660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994607.913:14187): pid=118942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780994608.001:14188): pid=118951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994608.122:14189): pid=118941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=118942 suid=74 rport=33682 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994608.122:14190): pid=118941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=118942 suid=74 rport=33682 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994608.677:14191): pid=118953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118953 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994608.767:14192): pid=118952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=118953 suid=74 rport=30538 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994608.767:14193): pid=118952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=118953 suid=74 rport=30538 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994608.800:14194): pid=118940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=118951 suid=74 rport=48160 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994608.801:14195): pid=118940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=118951 suid=74 rport=48160 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994609.273:14196): pid=118941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=118942 suid=74 rport=33682 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994609.273:14197): pid=118941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118942 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994609.274:14198): pid=118941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994609.275:14199): pid=118941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994609.275:14200): pid=118941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994609.323:14201): pid=118952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=118953 suid=74 rport=30538 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994609.323:14202): pid=118952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118953 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994609.324:14203): pid=118952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.152 addr=45.148.10.152 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994609.325:14204): pid=118952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994609.325:14205): pid=118952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994611.627:14206): pid=118940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=118951 suid=74 rport=48160 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994611.627:14207): pid=118940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118951 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994611.628:14208): pid=118940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994611.629:14209): pid=118940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=118940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994611.629:14210): pid=118940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994612.723:14211): pid=119230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=119230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994612.724:14212): pid=119185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=119230 suid=74 rport=48454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994612.724:14213): pid=119185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=119230 suid=74 rport=48454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994616.304:14214): pid=119185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=119230 suid=74 rport=48454 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994616.304:14215): pid=119185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=119230 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994616.305:14216): pid=119185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994616.305:14217): pid=119185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=119185 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994616.305:14218): pid=119185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994618.124:14219): pid=119502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=119502 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994618.125:14220): pid=119373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=119502 suid=74 rport=48462 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994618.125:14221): pid=119373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=119502 suid=74 rport=48462 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994620.183:14222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994620.186:14223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994620.351:14224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994620.409:14225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994622.644:14226): pid=119373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=119502 suid=74 rport=48462 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994622.644:14227): pid=119373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=119502 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994622.645:14228): pid=119373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994622.645:14229): pid=119373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=119373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994622.645:14230): pid=119373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994623.739:14231): pid=119898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=119898 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994623.740:14232): pid=119889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=119898 suid=74 rport=44762 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994623.740:14233): pid=119889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=119898 suid=74 rport=44762 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994625.749:14234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994625.753:14235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994625.757:14236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994625.895:14237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994625.973:14238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994626.011:14239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994626.320:14240): pid=119889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=119898 suid=74 rport=44762 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994626.321:14241): pid=119889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=119898 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994626.321:14242): pid=119889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994626.322:14243): pid=119889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=119889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994626.322:14244): pid=119889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994626.927:14245): pid=120047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994626.928:14246): pid=119993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=120047 suid=74 rport=44768 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994626.929:14247): pid=119993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=120047 suid=74 rport=44768 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994629.172:14248): pid=119993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=120047 suid=74 rport=44768 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994629.173:14249): pid=119993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120047 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994629.173:14250): pid=119993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994629.174:14251): pid=119993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=119993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994629.174:14252): pid=119993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994629.179:14253): pid=120175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120175 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994629.452:14254): pid=120174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=120175 suid=74 rport=34908 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994629.452:14255): pid=120174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=120175 suid=74 rport=34908 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994629.775:14256): pid=120407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994629.777:14257): pid=120299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=120407 suid=74 rport=44784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994629.777:14258): pid=120299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=120407 suid=74 rport=44784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994630.180:14259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994630.613:14260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994630.902:14261): pid=120174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=120175 suid=74 rport=34908 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994630.902:14262): pid=120174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120175 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994630.903:14263): pid=120174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994630.903:14264): pid=120174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120174 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994630.904:14265): pid=120174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994635.182:14266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994635.412:14267): pid=120299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=120407 suid=74 rport=44784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994635.413:14268): pid=120299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120407 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994635.413:14269): pid=120299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994635.414:14270): pid=120299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994635.414:14271): pid=120299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994635.515:14272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994636.545:14273): pid=120566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120566 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994636.546:14274): pid=120557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=120566 suid=74 rport=42394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994636.546:14275): pid=120557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=120566 suid=74 rport=42394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994637.181:14276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994637.341:14277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994639.414:14278): pid=120557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=120566 suid=74 rport=42394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994639.414:14279): pid=120557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120566 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994639.415:14280): pid=120557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994639.416:14281): pid=120557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120557 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994639.416:14282): pid=120557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994641.212:14283): pid=120955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994641.214:14284): pid=120897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=120955 suid=74 rport=47370 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994641.214:14285): pid=120897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=120955 suid=74 rport=47370 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994644.785:14286): pid=120897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=120955 suid=74 rport=47370 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994644.785:14287): pid=120897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120955 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994644.785:14288): pid=120897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994644.786:14289): pid=120897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=120897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994644.786:14290): pid=120897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994645.481:14291): pid=121119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=121119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994645.482:14292): pid=121110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=121119 suid=74 rport=47374 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994645.482:14293): pid=121110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=121119 suid=74 rport=47374 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994649.225:14294): pid=121110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=121119 suid=74 rport=47374 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994649.226:14295): pid=121110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=121119 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994649.226:14296): pid=121110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994649.226:14297): pid=121110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=121110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994649.226:14298): pid=121110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994650.366:14299): pid=121421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=121421 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994650.367:14300): pid=121289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=121421 suid=74 rport=40036 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994650.367:14301): pid=121289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=121421 suid=74 rport=40036 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994651.201:14302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994651.204:14303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994651.363:14304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994651.377:14305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994654.495:14306): pid=121289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=121421 suid=74 rport=40036 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994654.496:14307): pid=121289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=121421 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994654.497:14308): pid=121289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994654.497:14309): pid=121289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=121289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994654.497:14310): pid=121289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994655.416:14311): pid=121668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=121668 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994655.418:14312): pid=121603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=121668 suid=74 rport=40042 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994655.418:14313): pid=121603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=121668 suid=74 rport=40042 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994656.190:14314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994656.194:14315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994656.198:14316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994656.342:14317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994656.375:14318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994656.487:14319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994659.254:14320): pid=121603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=121668 suid=74 rport=40042 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994659.255:14321): pid=121603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=121668 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994659.255:14322): pid=121603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994659.256:14323): pid=121603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=121603 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994659.256:14324): pid=121603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994660.703:14325): pid=122050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994660.704:14326): pid=121834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=122050 suid=74 rport=40054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994660.704:14327): pid=121834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=122050 suid=74 rport=40054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994661.186:14328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994661.645:14329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994662.822:14330): pid=121834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=122050 suid=74 rport=40054 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994662.822:14331): pid=121834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122050 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994662.823:14332): pid=121834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994662.823:14333): pid=121834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=121834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994662.823:14334): pid=121834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994663.428:14335): pid=122104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994663.430:14336): pid=122095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=122104 suid=74 rport=55778 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994663.430:14337): pid=122095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=122104 suid=74 rport=55778 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994666.126:14338): pid=122095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=122104 suid=74 rport=55778 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994666.126:14339): pid=122095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122104 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994666.127:14340): pid=122095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994666.127:14341): pid=122095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994666.127:14342): pid=122095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994666.141:14343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994666.413:14344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994667.143:14345): pid=122208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994667.144:14346): pid=122150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=122208 suid=74 rport=55784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994667.144:14347): pid=122150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=122208 suid=74 rport=55784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994668.187:14348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994668.353:14349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994670.157:14350): pid=122150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=122208 suid=74 rport=55784 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994670.157:14351): pid=122150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122208 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994670.159:14352): pid=122150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994670.159:14353): pid=122150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994670.159:14354): pid=122150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994671.509:14355): pid=122667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122667 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994671.511:14356): pid=122658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=122667 suid=74 rport=58830 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994671.511:14357): pid=122658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=122667 suid=74 rport=58830 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994677.029:14358): pid=122658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=122667 suid=74 rport=58830 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994677.030:14359): pid=122658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122667 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994677.030:14360): pid=122658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994677.031:14361): pid=122658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994677.031:14362): pid=122658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994677.998:14363): pid=122814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122814 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994678.000:14364): pid=122752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=122814 suid=74 rport=58846 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994678.000:14365): pid=122752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=122814 suid=74 rport=58846 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994681.630:14366): pid=122752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=122814 suid=74 rport=58846 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994681.630:14367): pid=122752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122814 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994681.631:14368): pid=122752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994681.631:14369): pid=122752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=122752 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994681.631:14370): pid=122752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994681.650:14371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994681.653:14372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994681.775:14373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994681.879:14374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994682.632:14375): pid=123370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=123370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994682.633:14376): pid=123352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=123370 suid=74 rport=36510 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994682.633:14377): pid=123352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=123370 suid=74 rport=36510 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994686.834:14378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994686.837:14379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994686.841:14380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994686.998:14381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994687.051:14382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994687.138:14383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994687.911:14384): pid=123352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=123370 suid=74 rport=36510 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994687.913:14385): pid=123352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=123370 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994687.913:14386): pid=123352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994687.914:14387): pid=123352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=123352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994687.914:14388): pid=123352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994688.643:14389): pid=123544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=123544 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994688.644:14390): pid=123535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=123544 suid=74 rport=36520 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994688.644:14391): pid=123535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=123544 suid=74 rport=36520 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994692.184:14392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994692.586:14393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994694.687:14394): pid=123535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=123544 suid=74 rport=36520 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994694.687:14395): pid=123535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=123544 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994694.687:14396): pid=123535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994694.688:14397): pid=123535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=123535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994694.688:14398): pid=123535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994695.557:14399): pid=124013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994695.559:14400): pid=124004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=124013 suid=74 rport=54302 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994695.559:14401): pid=124004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=124013 suid=74 rport=54302 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994697.057:14402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994697.362:14403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994697.490:14404): pid=124004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=124013 suid=74 rport=54302 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994697.491:14405): pid=124004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124013 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994697.491:14406): pid=124004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994697.492:14407): pid=124004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994697.492:14408): pid=124004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994698.299:14409): pid=124113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994698.300:14410): pid=124108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=124113 suid=74 rport=54306 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994698.300:14411): pid=124108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=124113 suid=74 rport=54306 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994699.189:14412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994699.360:14413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994700.661:14414): pid=124108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=124113 suid=74 rport=54306 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994700.661:14415): pid=124108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124113 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994700.663:14416): pid=124108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994700.663:14417): pid=124108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124108 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994700.663:14418): pid=124108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994701.609:14419): pid=124394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994701.610:14420): pid=124385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=124394 suid=74 rport=52192 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994701.610:14421): pid=124385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=124394 suid=74 rport=52192 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994706.902:14422): pid=124385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=124394 suid=74 rport=52192 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994706.903:14423): pid=124385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124394 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994706.903:14424): pid=124385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994706.904:14425): pid=124385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994706.904:14426): pid=124385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994707.861:14427): pid=124674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994707.863:14428): pid=124601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=124674 suid=74 rport=52206 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994707.863:14429): pid=124601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=124674 suid=74 rport=52206 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994711.426:14430): pid=124601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=124674 suid=74 rport=52206 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994711.427:14431): pid=124601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124674 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994711.427:14432): pid=124601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994711.428:14433): pid=124601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124601 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994711.428:14434): pid=124601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994712.181:14435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994712.183:14436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994712.304:14437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994712.410:14438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994713.644:14439): pid=124963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994713.646:14440): pid=124962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=124963 suid=74 rport=54080 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994713.646:14441): pid=124962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=124963 suid=74 rport=54080 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994716.790:14442): pid=124962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=124963 suid=74 rport=54080 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994716.791:14443): pid=124962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124963 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994716.791:14444): pid=124962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994716.792:14445): pid=124962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=124962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994716.792:14446): pid=124962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994717.188:14447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994717.191:14448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994717.194:14449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994717.353:14450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994717.429:14451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994717.434:14452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994718.577:14453): pid=125176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994718.579:14454): pid=125094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=125176 suid=74 rport=54096 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994718.579:14455): pid=125094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=125176 suid=74 rport=54096 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994722.782:14456): pid=125094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125176 suid=74 rport=54096 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994722.783:14457): pid=125094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125176 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994722.783:14458): pid=125094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994722.784:14459): pid=125094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125094 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994722.784:14460): pid=125094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994722.802:14461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994723.216:14462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994723.957:14463): pid=125588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994723.959:14464): pid=125577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=125588 suid=74 rport=37548 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994723.959:14465): pid=125577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=125588 suid=74 rport=37548 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994725.982:14466): pid=125599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994726.192:14467): pid=125598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=125599 suid=74 rport=53012 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994726.192:14468): pid=125598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=125599 suid=74 rport=53012 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994727.345:14469): pid=125598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125599 suid=74 rport=53012 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994727.345:14470): pid=125598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125599 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994727.346:14471): pid=125598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994727.347:14472): pid=125598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125598 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994727.347:14473): pid=125598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994727.622:14474): pid=125577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125588 suid=74 rport=37548 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994727.622:14475): pid=125577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125588 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994727.623:14476): pid=125577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994727.623:14477): pid=125577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994727.623:14478): pid=125577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994727.640:14479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994727.950:14480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994729.262:14481): pid=125716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994729.263:14482): pid=125670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=125716 suid=74 rport=37558 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994729.264:14483): pid=125670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=125716 suid=74 rport=37558 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994730.180:14484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994730.343:14485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994732.700:14486): pid=125670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=125716 suid=74 rport=37558 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994732.700:14487): pid=125670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125716 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994732.700:14488): pid=125670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994732.701:14489): pid=125670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=125670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994732.701:14490): pid=125670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994733.231:14491): pid=126209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126209 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994733.233:14492): pid=126190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=126209 suid=74 rport=50574 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994733.233:14493): pid=126190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=126209 suid=74 rport=50574 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994735.720:14494): pid=126190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126209 suid=74 rport=50574 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994735.721:14495): pid=126190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126209 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994735.721:14496): pid=126190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994735.722:14497): pid=126190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994735.722:14498): pid=126190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994736.466:14499): pid=126236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994736.468:14500): pid=126227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=126236 suid=74 rport=50588 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994736.468:14501): pid=126227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=126236 suid=74 rport=50588 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994740.450:14502): pid=126227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126236 suid=74 rport=50588 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994740.451:14503): pid=126227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126236 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994740.451:14504): pid=126227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994740.452:14505): pid=126227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994740.452:14506): pid=126227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994741.529:14507): pid=126640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994741.530:14508): pid=126590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=126640 suid=74 rport=49964 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994741.531:14509): pid=126590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=126640 suid=74 rport=49964 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994743.187:14510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994743.190:14511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994743.338:14512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994743.359:14513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994744.525:14514): pid=126590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126640 suid=74 rport=49964 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994744.525:14515): pid=126590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126640 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994744.526:14516): pid=126590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994744.526:14517): pid=126590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994744.527:14518): pid=126590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994745.617:14519): pid=126874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126874 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994745.619:14520): pid=126809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=126874 suid=74 rport=49974 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994745.619:14521): pid=126809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=126874 suid=74 rport=49974 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994748.188:14522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994748.192:14523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994748.197:14524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994748.358:14525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994748.377:14526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994748.428:14527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994749.397:14528): pid=126809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=126874 suid=74 rport=49974 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994749.398:14529): pid=126809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126874 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994749.399:14530): pid=126809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994749.399:14531): pid=126809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=126809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994749.399:14532): pid=126809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994750.695:14533): pid=127216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127216 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994752.257:14534): pid=127043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=127216 suid=74 rport=59350 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994752.258:14535): pid=127043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=127216 suid=74 rport=59350 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994754.181:14536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994754.646:14537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994755.061:14538): pid=127319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780994755.151:14539): pid=127043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127216 suid=74 rport=59350 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994755.151:14540): pid=127043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127216 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994755.152:14541): pid=127043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994755.153:14542): pid=127043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994755.153:14543): pid=127043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780994755.324:14544): pid=127318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=127319 suid=74 rport=47274 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994755.325:14545): pid=127318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=127319 suid=74 rport=47274 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994755.931:14546): pid=127329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127329 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994755.932:14547): pid=127320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=127329 suid=74 rport=59354 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994755.932:14548): pid=127320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=127329 suid=74 rport=59354 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994756.759:14549): pid=127318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127319 suid=74 rport=47274 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994756.759:14550): pid=127318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127319 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994756.760:14551): pid=127318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994756.760:14552): pid=127318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994756.761:14553): pid=127318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994758.191:14554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994758.511:14555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994759.227:14556): pid=127320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127329 suid=74 rport=59354 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994759.228:14557): pid=127320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127329 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994759.228:14558): pid=127320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994759.229:14559): pid=127320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994759.229:14560): pid=127320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994760.040:14561): pid=127630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994760.042:14562): pid=127615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=127630 suid=74 rport=59358 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994760.042:14563): pid=127615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=127630 suid=74 rport=59358 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994761.182:14564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994761.339:14565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994763.285:14566): pid=127615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127630 suid=74 rport=59358 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994763.286:14567): pid=127615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127630 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994763.286:14568): pid=127615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994763.287:14569): pid=127615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994763.287:14570): pid=127615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994764.542:14571): pid=127905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994764.543:14572): pid=127896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=127905 suid=74 rport=45228 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994764.543:14573): pid=127896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=127905 suid=74 rport=45228 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994767.467:14574): pid=127896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127905 suid=74 rport=45228 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994767.467:14575): pid=127896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127905 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994767.468:14576): pid=127896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994767.468:14577): pid=127896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994767.468:14578): pid=127896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994768.104:14579): pid=127931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994768.106:14580): pid=127930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=127931 suid=74 rport=45242 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994768.111:14581): pid=127930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=127931 suid=74 rport=45242 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994769.823:14582): pid=127930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=127931 suid=74 rport=45242 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994769.823:14583): pid=127930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127931 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994769.824:14584): pid=127930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994769.824:14585): pid=127930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=127930 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994769.824:14586): pid=127930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994770.423:14587): pid=128245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=128245 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994770.424:14588): pid=128052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=128245 suid=74 rport=45750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994770.424:14589): pid=128052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=128245 suid=74 rport=45750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994772.977:14590): pid=128052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128245 suid=74 rport=45750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994772.977:14591): pid=128052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=128245 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994772.978:14592): pid=128052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994772.979:14593): pid=128052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=128052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994772.979:14594): pid=128052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994774.182:14595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994774.186:14596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994774.303:14597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994774.378:14598): pid=128465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=128465 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994774.379:14599): pid=128419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=128465 suid=74 rport=45764 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994774.379:14600): pid=128419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=128465 suid=74 rport=45764 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780994774.443:14601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994779.184:14602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994779.187:14603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994779.191:14604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994779.355:14605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994779.375:14606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994779.453:14607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994779.658:14608): pid=128419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128465 suid=74 rport=45764 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994779.659:14609): pid=128419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=128465 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994779.659:14610): pid=128419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994779.660:14611): pid=128419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=128419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994779.660:14612): pid=128419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994780.985:14613): pid=128849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=128849 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994780.986:14614): pid=128633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=128849 suid=74 rport=56028 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994780.986:14615): pid=128633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=128849 suid=74 rport=56028 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994785.086:14616): pid=128633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=128849 suid=74 rport=56028 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994785.086:14617): pid=128633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=128849 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994785.086:14618): pid=128633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994785.087:14619): pid=128633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=128633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994785.087:14620): pid=128633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994785.108:14621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994785.553:14622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994785.798:14623): pid=129095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994785.798:14624): pid=129080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=129095 suid=74 rport=56040 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994785.799:14625): pid=129080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=129095 suid=74 rport=56040 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994788.612:14626): pid=129080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=129095 suid=74 rport=56040 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994788.612:14627): pid=129080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129095 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994788.612:14628): pid=129080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994788.613:14629): pid=129080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129080 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994788.613:14630): pid=129080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994788.631:14631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994788.901:14632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994789.406:14633): pid=129203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129203 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994789.407:14634): pid=129202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=129203 suid=74 rport=56052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994789.407:14635): pid=129202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=129203 suid=74 rport=56052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994792.193:14636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994792.305:14637): pid=129202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=129203 suid=74 rport=56052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994792.306:14638): pid=129202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129203 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994792.306:14639): pid=129202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994792.307:14640): pid=129202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129202 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994792.307:14641): pid=129202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994792.387:14642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994793.439:14643): pid=129520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994793.441:14644): pid=129475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=129520 suid=74 rport=44790 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994793.441:14645): pid=129475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=129520 suid=74 rport=44790 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994797.343:14646): pid=129475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=129520 suid=74 rport=44790 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994797.343:14647): pid=129475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129520 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994797.343:14648): pid=129475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994797.344:14649): pid=129475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129475 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994797.344:14650): pid=129475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994798.682:14651): pid=129792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994798.684:14652): pid=129730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=129792 suid=74 rport=44796 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994798.684:14653): pid=129730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=129792 suid=74 rport=44796 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994801.968:14654): pid=129730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=129792 suid=74 rport=44796 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994801.968:14655): pid=129730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129792 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994801.969:14656): pid=129730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994801.969:14657): pid=129730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=129730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994801.969:14658): pid=129730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994802.506:14659): pid=130136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994802.507:14660): pid=130135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=130136 suid=74 rport=39318 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994802.508:14661): pid=130135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=130136 suid=74 rport=39318 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994803.941:14662): pid=130135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=130136 suid=74 rport=39318 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994803.942:14663): pid=130135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130136 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994803.942:14664): pid=130135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994803.943:14665): pid=130135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994803.943:14666): pid=130135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994804.577:14667): pid=130154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994804.578:14668): pid=130153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=130154 suid=74 rport=39324 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994804.578:14669): pid=130153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=130154 suid=74 rport=39324 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994805.183:14670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994805.188:14671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994805.308:14672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994805.417:14673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994808.757:14674): pid=130153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=130154 suid=74 rport=39324 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994808.757:14675): pid=130153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130154 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994808.758:14676): pid=130153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994808.758:14677): pid=130153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994808.758:14678): pid=130153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994809.244:14679): pid=130420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130420 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994809.245:14680): pid=130389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=130420 suid=74 rport=39354 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994809.245:14681): pid=130389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=130420 suid=74 rport=39354 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994810.185:14682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994810.188:14683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994810.190:14684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994810.375:14685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994810.403:14686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994810.418:14687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994812.949:14688): pid=130389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=130420 suid=74 rport=39354 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994812.949:14689): pid=130389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130420 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994812.950:14690): pid=130389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994812.951:14691): pid=130389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994812.951:14692): pid=130389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994814.188:14693): pid=130775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130775 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994814.189:14694): pid=130774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=130775 suid=74 rport=50718 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994814.189:14695): pid=130774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=130775 suid=74 rport=50718 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994816.181:14696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994816.626:14697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994818.120:14698): pid=130774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=130775 suid=74 rport=50718 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994818.121:14699): pid=130774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130775 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994818.122:14700): pid=130774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994818.122:14701): pid=130774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994818.122:14702): pid=130774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994819.163:14703): pid=130897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780994819.185:14704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994819.502:14705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780994820.071:14706): pid=130843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=130897 suid=74 rport=50726 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994820.071:14707): pid=130843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=130897 suid=74 rport=50726 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994822.903:14708): pid=130843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=130897 suid=74 rport=50726 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994822.903:14709): pid=130843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130897 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994822.904:14710): pid=130843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994822.905:14711): pid=130843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=130843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994822.905:14712): pid=130843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994822.922:14713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994823.068:14714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994825.314:14715): pid=131399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994825.316:14716): pid=131382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=131399 suid=74 rport=54080 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994825.316:14717): pid=131382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=131399 suid=74 rport=54080 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994825.705:14718): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23810 suid=1000 rport=53450 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780994825.710:14719): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780994825.710:14720): pid=23807 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780994828.542:14721): pid=131382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131399 suid=74 rport=54080 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994828.542:14722): pid=131382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131399 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994828.543:14723): pid=131382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994828.544:14724): pid=131382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994828.544:14725): pid=131382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994829.630:14726): pid=131494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994829.631:14727): pid=131432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=131494 suid=74 rport=54088 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994829.631:14728): pid=131432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=131494 suid=74 rport=54088 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994833.383:14729): pid=131432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131494 suid=74 rport=54088 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994833.383:14730): pid=131432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131494 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994833.384:14731): pid=131432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994833.384:14732): pid=131432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131432 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994833.384:14733): pid=131432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994834.476:14734): pid=131845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994834.477:14735): pid=131775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=131845 suid=74 rport=56326 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994834.477:14736): pid=131775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=131845 suid=74 rport=56326 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994835.936:14737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994835.940:14738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994835.968:14739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994836.077:14740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994836.206:14741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994837.270:14742): pid=131775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131845 suid=74 rport=56326 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994837.271:14743): pid=131775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131845 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994837.272:14744): pid=131775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994837.272:14745): pid=131775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131775 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994837.272:14746): pid=131775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994837.934:14747): pid=131986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131986 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994837.935:14748): pid=131977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=131986 suid=74 rport=56336 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994837.935:14749): pid=131977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=131986 suid=74 rport=56336 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994840.448:14750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994840.451:14751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994840.454:14752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994840.655:14753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994840.682:14754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994840.724:14755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994841.189:14756): pid=131977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=131986 suid=74 rport=56336 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994841.189:14757): pid=131977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131986 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994841.190:14758): pid=131977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994841.191:14759): pid=131977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=131977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994841.191:14760): pid=131977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994842.336:14761): pid=132350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132350 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994842.337:14762): pid=132341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=132350 suid=74 rport=53600 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994842.337:14763): pid=132341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=132350 suid=74 rport=53600 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994847.190:14764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994847.433:14765): pid=132341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=132350 suid=74 rport=53600 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994847.434:14766): pid=132341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132350 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994847.434:14767): pid=132341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994847.434:14768): pid=132341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994847.434:14769): pid=132341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994847.594:14770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994848.279:14771): pid=132602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132602 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994848.280:14772): pid=132583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=132602 suid=74 rport=53616 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994848.281:14773): pid=132583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=132602 suid=74 rport=53616 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994850.182:14774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994850.483:14775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994851.325:14776): pid=132583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=132602 suid=74 rport=53616 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994851.326:14777): pid=132583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132602 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994851.326:14778): pid=132583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994851.327:14779): pid=132583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994851.327:14780): pid=132583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994852.297:14781): pid=132926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132926 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994852.298:14782): pid=132917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=132926 suid=74 rport=39782 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994852.298:14783): pid=132917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=132926 suid=74 rport=39782 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994852.840:14784): pid=132939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132939 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994853.041:14785): pid=132938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=132939 suid=74 rport=34078 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994853.041:14786): pid=132938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=132939 suid=74 rport=34078 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994853.184:14787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994853.369:14788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994854.159:14789): pid=132938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=132939 suid=74 rport=34078 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994854.159:14790): pid=132938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132939 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994854.159:14791): pid=132938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994854.160:14792): pid=132938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132938 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994854.160:14793): pid=132938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994856.832:14794): pid=132917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=132926 suid=74 rport=39782 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994856.833:14795): pid=132917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132926 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994856.833:14796): pid=132917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994856.834:14797): pid=132917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=132917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994856.834:14798): pid=132917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994857.689:14799): pid=133048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=133048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994857.690:14800): pid=133039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=133048 suid=74 rport=39792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994857.690:14801): pid=133039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=133048 suid=74 rport=39792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994860.831:14802): pid=133039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=133048 suid=74 rport=39792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994860.832:14803): pid=133039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=133048 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994860.832:14804): pid=133039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994860.833:14805): pid=133039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=133039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994860.833:14806): pid=133039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994861.895:14807): pid=133614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=133614 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994861.896:14808): pid=133521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=133614 suid=74 rport=42226 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994861.896:14809): pid=133521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=133614 suid=74 rport=42226 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994866.125:14810): pid=133521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=133614 suid=74 rport=42226 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994866.125:14811): pid=133521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=133614 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994866.126:14812): pid=133521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994866.126:14813): pid=133521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=133521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994866.126:14814): pid=133521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994866.140:14815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994866.242:14816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994866.269:14817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994866.356:14818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994866.977:14819): pid=133696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=133696 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994866.978:14820): pid=133677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=133696 suid=74 rport=42230 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994866.978:14821): pid=133677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=133696 suid=74 rport=42230 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994871.021:14822): pid=133677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=133696 suid=74 rport=42230 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994871.021:14823): pid=133677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=133696 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994871.022:14824): pid=133677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994871.022:14825): pid=133677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=133677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994871.022:14826): pid=133677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994871.035:14827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994871.038:14828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994871.041:14829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994871.152:14830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994871.252:14831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994871.378:14832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994872.052:14833): pid=134119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994872.054:14834): pid=133995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=134119 suid=74 rport=35662 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994872.054:14835): pid=133995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=134119 suid=74 rport=35662 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994874.251:14836): pid=133995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134119 suid=74 rport=35662 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994874.252:14837): pid=133995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134119 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994874.253:14838): pid=133995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994874.253:14839): pid=133995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=133995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994874.253:14840): pid=133995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994874.842:14841): pid=134273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134273 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994874.844:14842): pid=134264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=134273 suid=74 rport=35664 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994874.844:14843): pid=134264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=134273 suid=74 rport=35664 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994876.702:14844): pid=134264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134273 suid=74 rport=35664 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994876.702:14845): pid=134264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134273 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994876.703:14846): pid=134264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994876.703:14847): pid=134264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134264 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994876.703:14848): pid=134264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994877.606:14849): pid=134291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994877.608:14850): pid=134290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=134291 suid=74 rport=35666 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994877.608:14851): pid=134290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=134291 suid=74 rport=35666 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994878.190:14852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994878.642:14853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994880.693:14854): pid=134290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134291 suid=74 rport=35666 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994880.694:14855): pid=134290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134291 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994880.695:14856): pid=134290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994880.695:14857): pid=134290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994880.695:14858): pid=134290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994880.712:14859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994880.852:14860): pid=134561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1780994881.011:14861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780994881.133:14862): pid=134541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=134561 suid=74 rport=59636 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994881.133:14863): pid=134541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=134561 suid=74 rport=59636 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994882.002:14864): pid=134653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134653 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994882.003:14865): pid=134562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=134653 suid=74 rport=37776 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994882.003:14866): pid=134562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=134653 suid=74 rport=37776 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994882.623:14867): pid=134541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134561 suid=74 rport=59636 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994882.624:14868): pid=134541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134561 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994882.625:14869): pid=134541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994882.625:14870): pid=134541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134541 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994882.625:14871): pid=134541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994884.192:14872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994884.356:14873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994887.313:14874): pid=134562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134653 suid=74 rport=37776 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994887.313:14875): pid=134562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134653 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994887.314:14876): pid=134562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994887.314:14877): pid=134562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134562 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994887.314:14878): pid=134562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994887.939:14879): pid=134911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134911 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994887.941:14880): pid=134910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=134911 suid=74 rport=37792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994887.941:14881): pid=134910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=134911 suid=74 rport=37792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994890.877:14882): pid=134910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=134911 suid=74 rport=37792 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994890.877:14883): pid=134910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134911 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994890.878:14884): pid=134910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994890.878:14885): pid=134910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=134910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994890.878:14886): pid=134910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994892.054:14887): pid=135205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994892.055:14888): pid=135124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=135205 suid=74 rport=42598 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994892.055:14889): pid=135124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=135205 suid=74 rport=42598 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994895.876:14890): pid=135124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=135205 suid=74 rport=42598 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994895.877:14891): pid=135124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135205 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994895.877:14892): pid=135124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994895.878:14893): pid=135124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135124 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994895.878:14894): pid=135124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994896.958:14895): pid=135247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135247 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994896.960:14896): pid=135238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=135247 suid=74 rport=42602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994896.960:14897): pid=135238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=135247 suid=74 rport=42602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994897.181:14898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994897.184:14899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994897.308:14900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994897.418:14901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994901.057:14902): pid=135238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=135247 suid=74 rport=42602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994901.057:14903): pid=135238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135247 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994901.058:14904): pid=135238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994901.059:14905): pid=135238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994901.059:14906): pid=135238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994901.188:14907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994901.310:14908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994901.339:14909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994901.396:14910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994901.418:14911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994901.535:14912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994903.154:14913): pid=135841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994903.156:14914): pid=135696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=135841 suid=74 rport=36016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994903.156:14915): pid=135696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=135841 suid=74 rport=36016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994907.886:14916): pid=135696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=135841 suid=74 rport=36016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994907.887:14917): pid=135696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135841 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994907.887:14918): pid=135696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994907.888:14919): pid=135696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135696 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994907.888:14920): pid=135696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994909.147:14921): pid=135891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994909.148:14922): pid=135882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=135891 suid=74 rport=36032 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994909.149:14923): pid=135882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=135891 suid=74 rport=36032 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994909.181:14924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994909.617:14925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994911.161:14926): pid=135882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=135891 suid=74 rport=36032 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994911.161:14927): pid=135882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135891 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994911.162:14928): pid=135882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994911.162:14929): pid=135882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=135882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994911.162:14930): pid=135882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994911.176:14931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994911.487:14932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994911.792:14933): pid=136392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=136392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994911.793:14934): pid=136240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=136392 suid=74 rport=49506 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994911.793:14935): pid=136240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=136392 suid=74 rport=49506 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994915.181:14936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994915.358:14937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994916.853:14938): pid=136240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=136392 suid=74 rport=49506 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994916.854:14939): pid=136240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=136392 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994916.854:14940): pid=136240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994916.855:14941): pid=136240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=136240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994916.855:14942): pid=136240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994917.783:14943): pid=136540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=136540 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994917.785:14944): pid=136531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=136540 suid=74 rport=49520 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994917.785:14945): pid=136531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=136540 suid=74 rport=49520 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994920.485:14946): pid=136531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=136540 suid=74 rport=49520 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994920.485:14947): pid=136531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=136540 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994920.486:14948): pid=136531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994920.486:14949): pid=136531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=136531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994920.486:14950): pid=136531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994922.405:14951): pid=136937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=136937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994922.406:14952): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=136937 suid=74 rport=42884 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994922.406:14953): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=136937 suid=74 rport=42884 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994927.155:14954): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=136937 suid=74 rport=42884 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994927.155:14955): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=136937 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994927.156:14956): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994927.156:14957): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=136846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994927.156:14958): pid=136846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994928.181:14959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994928.184:14960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994928.316:14961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994928.340:14962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994928.644:14963): pid=137203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=137203 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994928.645:14964): pid=137155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=137203 suid=74 rport=42898 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994928.646:14965): pid=137155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=137203 suid=74 rport=42898 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994931.973:14966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994931.976:14967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994931.979:14968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994932.119:14969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994932.205:14970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994932.213:14971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994933.474:14972): pid=137155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=137203 suid=74 rport=42898 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994933.475:14973): pid=137155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=137203 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994933.476:14974): pid=137155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994933.476:14975): pid=137155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=137155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994933.476:14976): pid=137155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994934.866:14977): pid=137580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=137580 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994934.867:14978): pid=137571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=137580 suid=74 rport=40198 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994934.867:14979): pid=137571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=137580 suid=74 rport=40198 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994937.970:14980): pid=137571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=137580 suid=74 rport=40198 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994937.970:14981): pid=137571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=137580 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994937.971:14982): pid=137571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994937.971:14983): pid=137571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=137571 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994937.971:14984): pid=137571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994938.991:14985): pid=137791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=137791 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994938.992:14986): pid=137790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=137791 suid=74 rport=40214 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994938.992:14987): pid=137790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=137791 suid=74 rport=40214 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994940.182:14988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994940.675:14989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994942.182:14990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994942.499:14991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994942.514:14992): pid=137790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=137791 suid=74 rport=40214 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994942.515:14993): pid=137790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=137791 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994942.515:14994): pid=137790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994942.516:14995): pid=137790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=137790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994942.516:14996): pid=137790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994943.421:14997): pid=138149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994943.423:14998): pid=138140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=138149 suid=74 rport=51734 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994943.423:14999): pid=138140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=138149 suid=74 rport=51734 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994945.443:15000): pid=138140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138149 suid=74 rport=51734 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994945.443:15001): pid=138140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138149 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994945.443:15002): pid=138140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994945.445:15003): pid=138140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994945.445:15004): pid=138140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994945.457:15005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994945.702:15006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994948.665:15007): pid=138279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994948.666:15008): pid=138205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=138279 suid=74 rport=51750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994948.666:15009): pid=138205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=138279 suid=74 rport=51750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994952.661:15010): pid=138205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138279 suid=74 rport=51750 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994952.661:15011): pid=138205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138279 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994952.661:15012): pid=138205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994952.662:15013): pid=138205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994952.662:15014): pid=138205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994953.881:15015): pid=138709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138709 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994953.882:15016): pid=138700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=138709 suid=74 rport=41066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994953.883:15017): pid=138700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=138709 suid=74 rport=41066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994956.954:15018): pid=138700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138709 suid=74 rport=41066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994956.954:15019): pid=138700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138709 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994956.955:15020): pid=138700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994956.956:15021): pid=138700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994956.956:15022): pid=138700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994957.943:15023): pid=138745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994957.980:15024): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=138745 suid=74 rport=41080 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994957.980:15025): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=138745 suid=74 rport=41080 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994959.184:15026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994959.188:15027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994959.320:15028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994959.349:15029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994960.501:15030): pid=138858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138858 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994960.609:15031): pid=138857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=138858 suid=74 rport=64646 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994960.609:15032): pid=138857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=138858 suid=74 rport=64646 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994961.255:15033): pid=138857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138858 suid=74 rport=64646 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994961.256:15034): pid=138857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138858 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994961.256:15035): pid=138857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.152 addr=45.148.10.152 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994961.257:15036): pid=138857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138857 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994961.257:15037): pid=138857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994962.122:15038): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=138745 suid=74 rport=41080 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994962.122:15039): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138745 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994962.123:15040): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994962.123:15041): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=138736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994962.123:15042): pid=138736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994962.142:15043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994962.247:15044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994962.250:15045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994962.309:15046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994962.371:15047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994962.417:15048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994963.488:15049): pid=139335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994963.489:15050): pid=139227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=139335 suid=74 rport=51490 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994963.489:15051): pid=139227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=139335 suid=74 rport=51490 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994968.309:15052): pid=139227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139335 suid=74 rport=51490 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994968.309:15053): pid=139227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139335 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994968.310:15054): pid=139227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994968.310:15055): pid=139227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994968.310:15056): pid=139227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994969.542:15057): pid=139386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994969.542:15058): pid=139377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=139386 suid=74 rport=51502 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994969.543:15059): pid=139377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=139386 suid=74 rport=51502 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994971.185:15060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994971.394:15061): pid=139510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139510 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1780994971.556:15062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780994971.598:15063): pid=139493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=139510 suid=74 rport=53924 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994971.598:15064): pid=139493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=139510 suid=74 rport=53924 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994972.528:15065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994972.662:15066): pid=139377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139386 suid=74 rport=51502 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994972.662:15067): pid=139377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139386 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994972.663:15068): pid=139377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994972.664:15069): pid=139377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139377 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994972.664:15070): pid=139377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994972.726:15071): pid=139493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139510 suid=74 rport=53924 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994972.727:15072): pid=139493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139510 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994972.728:15073): pid=139493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994972.728:15074): pid=139493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139493 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994972.729:15075): pid=139493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994972.860:15076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994973.577:15077): pid=139775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139775 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994973.579:15078): pid=139730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=139775 suid=74 rport=50572 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994973.579:15079): pid=139730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=139775 suid=74 rport=50572 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994976.186:15080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994976.386:15081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994977.993:15082): pid=139730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=139775 suid=74 rport=50572 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994977.994:15083): pid=139730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139775 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994977.994:15084): pid=139730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994977.995:15085): pid=139730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=139730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994977.995:15086): pid=139730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994979.011:15087): pid=140032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=140032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994979.013:15088): pid=140031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=140032 suid=74 rport=50580 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994979.013:15089): pid=140031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=140032 suid=74 rport=50580 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994982.036:15090): pid=140031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140032 suid=74 rport=50580 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994982.036:15091): pid=140031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=140032 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994982.037:15092): pid=140031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994982.038:15093): pid=140031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=140031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994982.038:15094): pid=140031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994983.340:15095): pid=140434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=140434 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994983.341:15096): pid=140425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=140434 suid=74 rport=34424 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994983.341:15097): pid=140425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=140434 suid=74 rport=34424 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994988.064:15098): pid=140425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140434 suid=74 rport=34424 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994988.065:15099): pid=140425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=140434 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994988.065:15100): pid=140425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994988.066:15101): pid=140425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=140425 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994988.066:15102): pid=140425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994989.074:15103): pid=140652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=140652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994989.076:15104): pid=140605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=140652 suid=74 rport=34440 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994989.076:15105): pid=140605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=140652 suid=74 rport=34440 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780994990.182:15106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994990.185:15107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994990.317:15108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994990.341:15109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994992.475:15110): pid=140605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=140652 suid=74 rport=34440 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994992.476:15111): pid=140605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=140652 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994992.476:15112): pid=140605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994992.477:15113): pid=140605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=140605 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994992.477:15114): pid=140605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994992.496:15115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994992.500:15116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780994992.504:15117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994992.727:15118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994992.746:15119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780994992.796:15120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994993.542:15121): pid=141065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141065 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994993.543:15122): pid=141016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=141065 suid=74 rport=56200 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994993.543:15123): pid=141016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=141065 suid=74 rport=56200 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994997.343:15124): pid=141016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141065 suid=74 rport=56200 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780994997.344:15125): pid=141016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141065 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780994997.344:15126): pid=141016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994997.344:15127): pid=141016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780994997.345:15128): pid=141016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780994998.482:15129): pid=141100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780994998.587:15130): pid=141101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780994998.589:15131): pid=141090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=141101 suid=74 rport=56216 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994998.589:15132): pid=141090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=141101 suid=74 rport=56216 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994998.745:15133): pid=141099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=141100 suid=74 rport=43756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780994998.746:15134): pid=141099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=141100 suid=74 rport=43756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995000.167:15135): pid=141099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141100 suid=74 rport=43756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995000.167:15136): pid=141099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141100 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995000.168:15137): pid=141099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995000.169:15138): pid=141099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141099 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995000.169:15139): pid=141099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995002.021:15140): pid=141090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141101 suid=74 rport=56216 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995002.021:15141): pid=141090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141101 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995002.022:15142): pid=141090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995002.022:15143): pid=141090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995002.022:15144): pid=141090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995002.035:15145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995002.397:15146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995003.186:15147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995003.478:15148): pid=141635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995003.479:15149): pid=141555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=141635 suid=74 rport=51602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995003.479:15150): pid=141555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=141635 suid=74 rport=51602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780995003.517:15151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995006.917:15152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995007.048:15153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995008.054:15154): pid=141555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141635 suid=74 rport=51602 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995008.055:15155): pid=141555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141635 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995008.056:15156): pid=141555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995008.056:15157): pid=141555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141555 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995008.057:15158): pid=141555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995010.284:15159): pid=141735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141735 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995010.286:15160): pid=141724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=141735 suid=74 rport=51606 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995010.286:15161): pid=141724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=141735 suid=74 rport=51606 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995012.443:15162): pid=141724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=141735 suid=74 rport=51606 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995012.444:15163): pid=141724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141735 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995012.444:15164): pid=141724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995012.445:15165): pid=141724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=141724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995012.445:15166): pid=141724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995013.818:15167): pid=142185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142185 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995013.819:15168): pid=142083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=142185 suid=74 rport=57204 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995013.819:15169): pid=142083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=142185 suid=74 rport=57204 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995017.965:15170): pid=142083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142185 suid=74 rport=57204 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995017.966:15171): pid=142083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142185 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995017.966:15172): pid=142083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995017.966:15173): pid=142083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995017.966:15174): pid=142083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995019.971:15175): pid=142247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142247 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995019.974:15176): pid=142238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=142247 suid=74 rport=57220 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995019.974:15177): pid=142238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=142247 suid=74 rport=57220 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995021.183:15178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995021.186:15179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995021.362:15180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995021.380:15181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995023.196:15182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995023.199:15183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995023.202:15184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995023.432:15185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995023.442:15186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995023.453:15187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995024.386:15188): pid=142238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142247 suid=74 rport=57220 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995024.387:15189): pid=142238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142247 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995024.388:15190): pid=142238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995024.389:15191): pid=142238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995024.389:15192): pid=142238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995026.306:15193): pid=142781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995026.307:15194): pid=142719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=142781 suid=74 rport=47658 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995026.308:15195): pid=142719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=142781 suid=74 rport=47658 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995030.191:15196): pid=142719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142781 suid=74 rport=47658 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995030.191:15197): pid=142719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142781 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995030.192:15198): pid=142719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995030.192:15199): pid=142719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995030.192:15200): pid=142719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995031.047:15201): pid=142945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142945 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995031.048:15202): pid=142891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=142945 suid=74 rport=41934 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995031.048:15203): pid=142891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=142945 suid=74 rport=41934 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995033.186:15204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995033.638:15205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995033.642:15206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995033.879:15207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995035.805:15208): pid=142891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=142945 suid=74 rport=41934 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995035.805:15209): pid=142891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142945 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995035.806:15210): pid=142891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995035.806:15211): pid=142891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=142891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995035.806:15212): pid=142891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995037.054:15213): pid=143293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143293 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995037.055:15214): pid=143284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=143293 suid=74 rport=41938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995037.055:15215): pid=143284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=143293 suid=74 rport=41938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995037.183:15216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995037.355:15217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995040.906:15218): pid=143284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143293 suid=74 rport=41938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995040.906:15219): pid=143284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143293 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995040.907:15220): pid=143284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995040.908:15221): pid=143284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995040.908:15222): pid=143284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995041.921:15223): pid=143826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995041.922:15224): pid=143694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=143826 suid=74 rport=53408 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995041.923:15225): pid=143694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=143826 suid=74 rport=53408 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995044.717:15226): pid=143694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143826 suid=74 rport=53408 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995044.718:15227): pid=143694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143826 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995044.719:15228): pid=143694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995044.720:15229): pid=143694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995044.720:15230): pid=143694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995046.894:15231): pid=143945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143945 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995046.895:15232): pid=143933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=143945 suid=74 rport=53416 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995046.895:15233): pid=143933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=143945 suid=74 rport=53416 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995048.903:15234): pid=143933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143945 suid=74 rport=53416 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995048.904:15235): pid=143933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143945 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995048.905:15236): pid=143933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995048.905:15237): pid=143933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995048.905:15238): pid=143933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995049.628:15239): pid=143968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995049.629:15240): pid=143967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=143968 suid=74 rport=53426 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995049.629:15241): pid=143967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=143968 suid=74 rport=53426 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995051.656:15242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995051.660:15243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995051.776:15244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995051.871:15245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995052.492:15246): pid=143967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=143968 suid=74 rport=53426 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995052.492:15247): pid=143967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143968 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995052.493:15248): pid=143967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995052.493:15249): pid=143967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=143967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995052.493:15250): pid=143967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995054.185:15251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995054.188:15252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995054.191:15253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995054.353:15254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995054.374:15255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995054.424:15256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995054.833:15257): pid=144551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=144551 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995054.834:15258): pid=144456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=144551 suid=74 rport=42708 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995054.834:15259): pid=144456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=144551 suid=74 rport=42708 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995059.013:15260): pid=144456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144551 suid=74 rport=42708 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995059.013:15261): pid=144456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=144551 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995059.013:15262): pid=144456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995059.014:15263): pid=144456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=144456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995059.014:15264): pid=144456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995062.732:15265): pid=144877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=144877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995062.733:15266): pid=144584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=144877 suid=74 rport=42716 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995062.734:15267): pid=144584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=144877 suid=74 rport=42716 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995064.182:15268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995064.184:15269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995064.445:15270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995064.612:15271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995066.269:15272): pid=144584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=144877 suid=74 rport=42716 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995066.270:15273): pid=144584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=144877 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995066.271:15274): pid=144584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995066.271:15275): pid=144584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=144584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995066.271:15276): pid=144584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995068.065:15277): pid=145151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=145151 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995068.066:15278): pid=145142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=145151 suid=74 rport=44470 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995068.066:15279): pid=145142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=145151 suid=74 rport=44470 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995068.185:15280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995068.355:15281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995073.126:15282): pid=145142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=145151 suid=74 rport=44470 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995073.126:15283): pid=145142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=145151 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995073.127:15284): pid=145142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995073.127:15285): pid=145142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=145142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995073.128:15286): pid=145142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995074.300:15287): pid=145500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=145500 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995074.301:15288): pid=145491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=145500 suid=74 rport=46862 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995074.301:15289): pid=145491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=145500 suid=74 rport=46862 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995080.803:15290): pid=145491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=145500 suid=74 rport=46862 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995080.804:15291): pid=145491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=145500 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995080.804:15292): pid=145491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995080.805:15293): pid=145491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=145491 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995080.805:15294): pid=145491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995081.973:15295): pid=145798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=145798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995081.974:15296): pid=145736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=145798 suid=74 rport=35758 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995081.974:15297): pid=145736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=145798 suid=74 rport=35758 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995082.180:15298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995082.183:15299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995082.294:15300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995082.374:15301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995084.517:15302): pid=145736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=145798 suid=74 rport=35758 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995084.517:15303): pid=145736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=145798 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995084.518:15304): pid=145736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995084.519:15305): pid=145736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=145736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995084.519:15306): pid=145736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995084.540:15307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995084.544:15308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995084.547:15309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995084.728:15310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995084.760:15311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995084.806:15312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995085.162:15313): pid=146136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995085.163:15314): pid=146104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=146136 suid=74 rport=35772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995085.164:15315): pid=146104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=146136 suid=74 rport=35772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995087.282:15316): pid=146104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=146136 suid=74 rport=35772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995087.283:15317): pid=146104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146136 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995087.283:15318): pid=146104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995087.284:15319): pid=146104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995087.284:15320): pid=146104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995088.150:15321): pid=146162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995088.151:15322): pid=146153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=146162 suid=74 rport=35774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995088.151:15323): pid=146153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=146162 suid=74 rport=35774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995090.433:15324): pid=146260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146260 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995090.633:15325): pid=146251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=146260 suid=74 rport=54580 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995090.633:15326): pid=146251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=146260 suid=74 rport=54580 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780995091.723:15327): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995091.723:15328): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780995091.740:15329): pid=146251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=146260 suid=74 rport=54580 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995091.740:15330): pid=146251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146260 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995091.741:15331): pid=146251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995091.741:15332): pid=146251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995091.741:15333): pid=146251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1780995091.751:15334): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995091.751:15335): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995091.767:15336): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995091.768:15337): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995091.792:15338): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995091.792:15339): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995091.955:15340): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995091.955:15341): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995091.991:15342): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995091.991:15343): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995092.011:15344): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995092.011:15345): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995092.106:15346): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995092.106:15347): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995092.154:15348): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995092.154:15349): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995092.197:15350): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995092.197:15351): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995092.220:15352): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995092.220:15353): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995092.258:15354): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995092.258:15355): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995092.278:15356): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995092.278:15357): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780995092.347:15358): pid=146655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780995092.347:15359): pid=146655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6971706D756F6C63676B6E646F767A6F7269796C657062747A6D7569706D7368203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939353039312E373533333231342D3133353731362D3230313432313537373434313938332F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780995092.349:15360): pid=146655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780995092.354:15361): pid=146655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995092.629:15362): pid=146655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780995092.630:15363): pid=146655 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995092.633:15364): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995092.634:15365): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995092.671:15366): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995092.671:15367): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995092.711:15368): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995092.712:15369): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995092.730:15370): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995092.730:15371): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995092.762:15372): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995092.762:15373): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995092.781:15374): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995092.781:15375): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780995092.849:15376): pid=146745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780995092.850:15377): pid=146745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B776D666771637976686A66716B727A69637A7070756D626E756C786F697A6F203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939353039312E373533333231342D3133353731362D3230313432313537373434313938332F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780995092.851:15378): pid=146745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780995092.854:15379): pid=146745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780995093.942:15380): pid=146153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=146162 suid=74 rport=35774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995093.942:15381): pid=146153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146162 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995093.943:15382): pid=146153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995093.944:15383): pid=146153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995093.944:15384): pid=146153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995094.846:15385): pid=146845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995094.865:15386): pid=146835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=146845 suid=74 rport=52980 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995094.865:15387): pid=146835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=146845 suid=74 rport=52980 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995095.180:15388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995095.183:15389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995095.552:15390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995095.589:15391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995096.217:15392): pid=146745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780995096.217:15393): pid=146745 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995096.221:15394): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995096.221:15395): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995096.238:15396): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995096.238:15397): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995096.263:15398): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995096.263:15399): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780995098.406:15400): pid=146835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=146845 suid=74 rport=52980 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995098.406:15401): pid=146835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146845 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995098.407:15402): pid=146835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995098.408:15403): pid=146835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995098.408:15404): pid=146835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995098.436:15405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995098.635:15406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995099.371:15407): pid=146996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995099.372:15408): pid=146987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=146996 suid=74 rport=52992 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995099.372:15409): pid=146987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=146996 suid=74 rport=52992 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995102.263:15410): pid=146987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=146996 suid=74 rport=52992 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995102.264:15411): pid=146987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146996 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995102.265:15412): pid=146987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995102.266:15413): pid=146987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=146987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995102.269:15414): pid=146987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995103.210:15415): pid=147446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=147446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995103.211:15416): pid=147347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=147446 suid=74 rport=42476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995103.211:15417): pid=147347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=147446 suid=74 rport=42476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995107.767:15418): pid=147347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=147446 suid=74 rport=42476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995107.767:15419): pid=147347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=147446 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995107.768:15420): pid=147347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995107.768:15421): pid=147347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=147347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995107.768:15422): pid=147347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995109.467:15423): pid=147616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=147616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995109.468:15424): pid=147599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=147616 suid=74 rport=42490 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995109.468:15425): pid=147599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=147616 suid=74 rport=42490 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995112.390:15426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995112.398:15427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995112.554:15428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995112.571:15429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995113.286:15430): pid=147599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=147616 suid=74 rport=42490 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995113.287:15431): pid=147599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=147616 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995113.287:15432): pid=147599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995113.288:15433): pid=147599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=147599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995113.288:15434): pid=147599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995115.033:15435): pid=147957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=147957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995115.034:15436): pid=147948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=147957 suid=74 rport=48070 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995115.034:15437): pid=147948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=147957 suid=74 rport=48070 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995115.186:15438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995115.189:15439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995115.192:15440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995115.359:15441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995115.451:15442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995115.456:15443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995118.657:15444): pid=147948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=147957 suid=74 rport=48070 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995118.657:15445): pid=147948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=147957 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995118.658:15446): pid=147948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995118.659:15447): pid=147948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=147948 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995118.659:15448): pid=147948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995119.610:15449): pid=148240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=148240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995119.611:15450): pid=148239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=148240 suid=74 rport=48086 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995119.611:15451): pid=148239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=148240 suid=74 rport=48086 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995119.977:15452): pid=148250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=148250 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995120.242:15453): pid=148249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=148250 suid=74 rport=56112 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995120.242:15454): pid=148249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=148250 suid=74 rport=56112 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995121.365:15455): pid=148239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=148240 suid=74 rport=48086 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995121.365:15456): pid=148239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=148240 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995121.366:15457): pid=148239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.27.117.178 addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995121.366:15458): pid=148239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=148239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995121.366:15459): pid=148239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="ftp" exe="/usr/sbin/sshd" hostname=? addr=82.27.117.178 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995121.670:15460): pid=148249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=148250 suid=74 rport=56112 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995121.671:15461): pid=148249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=148250 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995121.671:15462): pid=148249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995121.672:15463): pid=148249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=148249 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995121.672:15464): pid=148249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995126.186:15465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995126.190:15466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995126.489:15467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995126.667:15468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995129.188:15469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995129.388:15470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995143.182:15471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995143.185:15472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995143.359:15473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995143.397:15474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995146.185:15475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995146.188:15476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995146.191:15477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995146.342:15478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995146.389:15479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995146.451:15480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995157.184:15481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995157.187:15482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995157.515:15483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995157.592:15484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995160.062:15485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995160.319:15486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995174.191:15487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995174.194:15488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995174.336:15489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995174.387:15490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995177.188:15491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995177.192:15492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995177.195:15493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995177.395:15494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995177.425:15495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995177.466:15496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995188.182:15497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995188.186:15498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995188.517:15499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995188.641:15500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995191.181:15501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995191.375:15502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780995203.917:15503): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995203.917:15504): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995203.957:15505): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995203.957:15506): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995203.978:15507): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995203.978:15508): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995204.014:15509): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995204.014:15510): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995204.131:15511): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995204.131:15512): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995204.164:15513): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995204.164:15514): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995204.180:15515): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995204.180:15516): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995204.263:15517): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995204.263:15518): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995204.293:15519): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995204.293:15520): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995204.333:15521): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995204.333:15522): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995204.352:15523): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995204.352:15524): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995204.382:15525): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995204.382:15526): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995204.401:15527): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995204.401:15528): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780995204.467:15529): pid=153041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780995204.467:15530): pid=153041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7576656A6C6C617565756674656472656568646F7477706A797A697A626B7A66203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939353230332E393630343030362D3133373632312D3234353037393535303036373538382F416E736962616C6C5A5F74656D7066696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780995204.470:15531): pid=153041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780995204.477:15532): pid=153041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780995204.493:15533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995204.497:15534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995204.619:15535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995204.666:15536): pid=153041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780995204.666:15537): pid=153041 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995204.670:15538): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995204.670:15539): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995204.690:15540): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995204.690:15541): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780995204.716:15542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995204.722:15543): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995204.722:15544): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995204.843:15545): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995204.843:15546): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995204.875:15547): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995204.875:15548): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995204.897:15549): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995204.897:15550): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995204.932:15551): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995204.933:15552): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995205.050:15553): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995205.050:15554): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995205.086:15555): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995205.086:15556): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995205.109:15557): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995205.109:15558): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995205.140:15559): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995205.140:15560): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995205.160:15561): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995205.161:15562): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780995205.223:15563): pid=153176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780995205.223:15564): pid=153176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61786C77747062617A7966776F6A7376637A666E736971647A786E6672737262203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939353230342E383737373839352D3133373636352D3137333237353132333831313137362F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780995205.224:15565): pid=153176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780995205.229:15566): pid=153176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995205.409:15567): pid=153176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780995205.409:15568): pid=153176 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995205.412:15569): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995205.412:15570): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995205.433:15571): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995205.433:15572): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995205.462:15573): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995205.462:15574): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995205.575:15575): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995205.575:15576): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995205.602:15577): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995205.602:15578): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995205.620:15579): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995205.620:15580): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995205.652:15581): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995205.652:15582): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995205.792:15583): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995205.792:15584): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995205.827:15585): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995205.827:15586): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995205.843:15587): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995205.844:15588): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995205.875:15589): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995205.876:15590): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995205.895:15591): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995205.895:15592): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780995205.945:15593): pid=153325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780995205.945:15594): pid=153325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67686D727563777778706E76786D7A6372656B726D6B77766474786862697065203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939353230352E363035303332372D3133373730312D37313136373036303332313134372F416E736962616C6C5A5F626C6F636B696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780995205.945:15595): pid=153325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780995205.947:15596): pid=153325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995206.149:15597): pid=153325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780995206.149:15598): pid=153325 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995206.152:15599): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995206.152:15600): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995206.172:15601): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995206.172:15602): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995206.203:15603): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995206.203:15604): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995206.617:15605): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995206.617:15606): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995206.649:15607): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995206.649:15608): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995206.669:15609): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995206.669:15610): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995206.707:15611): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995206.707:15612): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995206.728:15613): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995206.728:15614): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995206.765:15615): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995206.765:15616): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995206.782:15617): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995206.782:15618): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995206.810:15619): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995206.810:15620): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995206.830:15621): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995206.831:15622): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780995206.888:15623): pid=153500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780995206.888:15624): pid=153500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766E7A756D7663666B6C7871776A6F616C6B6F666A756E73697663686F686B7A203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939353230362E363532343238322D3133373733392D3231363431353933353635373939302F416E736962616C6C5A5F626C6F636B696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780995206.889:15625): pid=153500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780995206.891:15626): pid=153500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995207.063:15627): pid=153500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780995207.063:15628): pid=153500 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995207.067:15629): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995207.067:15630): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995207.082:15631): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995207.082:15632): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995207.111:15633): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995207.111:15634): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995207.238:15635): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995207.238:15636): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995207.264:15637): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995207.264:15638): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995207.277:15639): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995207.277:15640): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995207.311:15641): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995207.311:15642): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995207.451:15643): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995207.451:15644): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995207.484:15645): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995207.484:15646): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995207.511:15647): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995207.511:15648): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995207.541:15649): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995207.541:15650): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995207.559:15651): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995207.559:15652): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780995207.611:15653): pid=153641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780995207.611:15654): pid=153641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637278796E6478646E706879656D67666E77616F736F66646377756570667678203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939353230372E323636333430352D3133373833342D3138363430363736373532313736332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780995207.611:15655): pid=153641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780995207.620:15656): pid=153641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780995207.637:15657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995207.641:15658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995207.645:15659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995207.798:15660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995207.820:15661): pid=153641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780995207.820:15662): pid=153641 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995207.824:15663): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995207.824:15664): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780995207.845:15665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780995207.847:15666): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995207.847:15667): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1780995207.861:15668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995207.874:15669): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995207.874:15670): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995207.961:15671): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995207.961:15672): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995207.992:15673): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995207.992:15674): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995208.011:15675): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995208.011:15676): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995208.045:15677): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995208.045:15678): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995208.173:15679): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995208.173:15680): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995208.211:15681): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995208.211:15682): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995208.231:15683): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995208.231:15684): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995208.266:15685): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995208.266:15686): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995208.287:15687): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995208.287:15688): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1780995208.356:15689): pid=153811 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1780995208.356:15690): pid=153811 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7579626A7A74707966796B656766736C79617863786F6473686968626F6967203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313738303939353230372E3939353331312D3133373837372D3130323832323537333137323937322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780995208.357:15691): pid=153811 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1780995208.362:15692): pid=153811 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995208.528:15693): pid=153811 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780995208.529:15694): pid=153811 uid=1002 auid=1002 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1780995208.531:15695): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995208.531:15696): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1780995208.552:15697): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1780995208.553:15698): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1780995208.583:15699): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1780995208.583:15700): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780995209.296:15701): pid=153837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=153837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995209.503:15702): pid=153836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=153837 suid=74 rport=55810 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995209.504:15703): pid=153836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=153837 suid=74 rport=55810 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995210.647:15704): pid=153836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=153837 suid=74 rport=55810 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995210.647:15705): pid=153836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=153837 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995210.648:15706): pid=153836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995210.649:15707): pid=153836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=153836 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995210.649:15708): pid=153836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995219.186:15709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995219.190:15710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995219.567:15711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995219.668:15712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995222.182:15713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995222.350:15714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995235.185:15715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995235.188:15716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995235.309:15717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995235.407:15718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995238.188:15719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995238.191:15720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995238.195:15721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995238.354:15722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995238.442:15723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995238.498:15724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995243.365:15725): pid=155774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=155774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995243.639:15726): pid=155758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=155774 suid=74 rport=40238 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995243.639:15727): pid=155758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=155774 suid=74 rport=40238 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995245.118:15728): pid=155758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=155774 suid=74 rport=40238 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995245.119:15729): pid=155758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=155774 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995245.119:15730): pid=155758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995245.120:15731): pid=155758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=155758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995245.120:15732): pid=155758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995250.186:15733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995250.189:15734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995250.558:15735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995250.655:15736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995252.302:15737): pid=156142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=156142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995252.304:15738): pid=156141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=156142 suid=74 rport=51770 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995252.304:15739): pid=156141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=156142 suid=74 rport=51770 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995252.372:15740): pid=156141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780995252.377:15741): pid=156141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995252.386:15742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780995252.396:15743): pid=156141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995252.396:15744): pid=156141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995252.426:15745): pid=156141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995252.427:15746): pid=156141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=156142 suid=74 rport=51770 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995252.429:15747): pid=156141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995252.429:15748): pid=156141 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=16 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780995252.429:15748): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc2953d080 a2=4 a3=3e8 items=0 ppid=37599 pid=156141 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995252.429:15748): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995252.431:15749): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1780995252.498:15750): pid=156155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1780995252.499:15751): pid=156155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1780995252.499:15752): pid=156155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995252.500:15753): pid=156155 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=17 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780995252.500:15753): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd7a6b5f80 a2=4 a3=3e8 items=0 ppid=1 pid=156155 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995252.500:15753): proctitle="(systemd)"
type=USER_START msg=audit(1780995252.502:15754): pid=156155 uid=0 auid=1000 ses=17 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_STOP msg=audit(1780995252.594:15755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995252.645:15756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995252.668:15757): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780995252.669:15758): pid=156200 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=156200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1780995252.671:15759): pid=156200 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780995252.715:15760): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780995252.715:15761): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780995252.716:15762): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=156201 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1780995252.767:15763): pid=156214 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780995252.768:15764): pid=156214 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776665666674706C767A6E7262757A6F6573686969716D6979707872636C7A66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780995252.769:15765): pid=156214 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780995252.773:15766): pid=156214 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1780995257.371:15767): prog-id=663 op=LOAD
type=BPF msg=audit(1780995257.371:15768): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995257.371:15769): prog-id=664 op=LOAD
type=BPF msg=audit(1780995257.371:15770): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995257.527:15771): prog-id=665 op=LOAD
type=BPF msg=audit(1780995257.527:15772): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995257.539:15773): prog-id=666 op=LOAD
type=BPF msg=audit(1780995257.539:15774): prog-id=667 op=LOAD
type=BPF msg=audit(1780995257.539:15775): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995257.539:15776): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995257.543:15777): prog-id=668 op=LOAD
type=BPF msg=audit(1780995257.543:15778): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995257.545:15779): prog-id=669 op=LOAD
type=BPF msg=audit(1780995257.545:15780): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995257.545:15781): prog-id=670 op=LOAD
type=BPF msg=audit(1780995257.545:15782): prog-id=671 op=LOAD
type=BPF msg=audit(1780995257.545:15783): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995257.545:15784): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995257.546:15785): prog-id=672 op=LOAD
type=BPF msg=audit(1780995257.546:15786): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995257.546:15787): prog-id=673 op=LOAD
type=BPF msg=audit(1780995257.546:15788): prog-id=674 op=LOAD
type=BPF msg=audit(1780995257.546:15789): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995257.546:15790): prog-id=0 op=UNLOAD
type=MAC_POLICY_LOAD msg=audit(1780995265.611:15791): auid=1000 ses=16 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1780995265.611:15791): arch=c000003e syscall=1 success=yes exit=3546155 a0=4 a1=7f3500200000 a2=361c2b a3=0 items=0 ppid=156593 pid=157382 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995265.611:15791): proctitle="/usr/sbin/load_policy"
type=SERVICE_START msg=audit(1780995265.779:15792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995265.781:15793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995265.899:15794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995265.980:15795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780995266.754:15796): prog-id=675 op=LOAD
type=BPF msg=audit(1780995266.754:15797): prog-id=676 op=LOAD
type=BPF msg=audit(1780995266.754:15798): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995266.754:15799): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995266.758:15800): prog-id=677 op=LOAD
type=BPF msg=audit(1780995266.759:15801): prog-id=678 op=LOAD
type=BPF msg=audit(1780995266.759:15802): prog-id=679 op=LOAD
type=BPF msg=audit(1780995266.759:15803): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995266.759:15804): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995266.759:15805): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995266.766:15806): prog-id=680 op=LOAD
type=BPF msg=audit(1780995266.766:15807): prog-id=681 op=LOAD
type=BPF msg=audit(1780995266.766:15808): prog-id=682 op=LOAD
type=BPF msg=audit(1780995266.767:15809): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995266.767:15810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995266.767:15811): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780995266.955:15812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rbae990cc089c44da914f31ac25883af0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780995267.275:15813): prog-id=683 op=LOAD
type=BPF msg=audit(1780995267.275:15814): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.275:15815): prog-id=684 op=LOAD
type=BPF msg=audit(1780995267.275:15816): prog-id=685 op=LOAD
type=BPF msg=audit(1780995267.275:15817): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.276:15818): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.277:15819): prog-id=686 op=LOAD
type=BPF msg=audit(1780995267.278:15820): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.281:15821): prog-id=687 op=LOAD
type=BPF msg=audit(1780995267.281:15822): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.281:15823): prog-id=688 op=LOAD
type=BPF msg=audit(1780995267.281:15824): prog-id=689 op=LOAD
type=BPF msg=audit(1780995267.281:15825): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.281:15826): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.281:15827): prog-id=690 op=LOAD
type=BPF msg=audit(1780995267.281:15828): prog-id=691 op=LOAD
type=BPF msg=audit(1780995267.281:15829): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.282:15830): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.283:15831): prog-id=692 op=LOAD
type=BPF msg=audit(1780995267.283:15832): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780995267.342:15833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r1743a0c7f70246f2b238cb98c02f6598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995267.381:15834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780995267.383:15835): prog-id=693 op=LOAD
type=BPF msg=audit(1780995267.383:15836): prog-id=694 op=LOAD
type=BPF msg=audit(1780995267.384:15837): prog-id=695 op=LOAD
type=BPF msg=audit(1780995267.403:15838): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.403:15839): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.403:15840): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1780995267.404:15841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780995267.406:15842): prog-id=696 op=LOAD
type=BPF msg=audit(1780995267.406:15843): prog-id=697 op=LOAD
type=BPF msg=audit(1780995267.433:15844): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995267.433:15845): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780995267.434:15846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995267.466:15847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780995268.016:15848): prog-id=698 op=LOAD
type=BPF msg=audit(1780995268.017:15849): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995268.017:15850): prog-id=699 op=LOAD
type=BPF msg=audit(1780995268.017:15851): prog-id=700 op=LOAD
type=BPF msg=audit(1780995268.017:15852): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995268.017:15853): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995268.019:15854): prog-id=701 op=LOAD
type=BPF msg=audit(1780995268.019:15855): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995268.022:15856): prog-id=702 op=LOAD
type=BPF msg=audit(1780995268.022:15857): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995268.022:15858): prog-id=703 op=LOAD
type=BPF msg=audit(1780995268.022:15859): prog-id=704 op=LOAD
type=BPF msg=audit(1780995268.022:15860): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995268.022:15861): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995268.022:15862): prog-id=705 op=LOAD
type=BPF msg=audit(1780995268.022:15863): prog-id=706 op=LOAD
type=BPF msg=audit(1780995268.022:15864): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995268.022:15865): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995268.023:15866): prog-id=707 op=LOAD
type=BPF msg=audit(1780995268.023:15867): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780995268.287:15868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995268.287:15869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995268.289:15870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rbae990cc089c44da914f31ac25883af0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995268.291:15871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r1743a0c7f70246f2b238cb98c02f6598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995268.551:15872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1780995268.553:15873): pid=156216 uid=0 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-rpm-macros-252-14.el9_2.8.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780995268.553:15874): pid=156216 uid=0 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-libs-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780995268.553:15875): pid=156216 uid=0 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-pam-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780995268.553:15876): pid=156216 uid=0 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780995268.553:15877): pid=156216 uid=0 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="systemd-container-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1780995268.554:15878): pid=156216 uid=0 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-udev-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1780995268.554:15879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995268.556:15880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995268.725:15881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995268.741:15882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995268.822:15883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995269.527:15884): pid=156214 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780995269.527:15885): pid=156214 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780995269.533:15886): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780995269.533:15887): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1780995280.597:15888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995280.686:15889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995280.980:15890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995281.235:15891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995283.194:15892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995283.375:15893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995296.183:15894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995296.185:15895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995296.305:15896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995296.414:15897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780995296.971:15898): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780995296.971:15899): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780995296.973:15900): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=160642 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1780995297.028:15901): pid=160657 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780995297.028:15902): pid=160657 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63626D68697065626364776B69667362696C786D67686B6E656675676563716C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780995297.029:15903): pid=160657 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780995297.034:15904): pid=160657 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1780995299.185:15905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995299.188:15906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995299.191:15907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995299.345:15908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995299.434:15909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995299.440:15910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995301.069:15911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r65db041d40d8438cb089acead2466f73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995301.117:15912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r2d185b5487f345fd9207dfc271021e30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1780995301.121:15913): pid=160660 uid=0 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="sos-4.8.2-2.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1780995301.478:15914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995301.478:15915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995301.480:15916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r65db041d40d8438cb089acead2466f73 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995301.481:15917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r2d185b5487f345fd9207dfc271021e30 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995302.090:15918): pid=160657 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780995302.091:15919): pid=160657 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780995302.096:15920): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780995302.096:15921): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1780995311.189:15922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995311.295:15923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995311.525:15924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995311.680:15925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995314.181:15926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995314.341:15927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995314.869:15928): pid=161883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=161883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995314.958:15929): pid=161882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=161883 suid=74 rport=27920 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995314.959:15930): pid=161882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=161883 suid=74 rport=27920 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995315.515:15931): pid=161882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=161883 suid=74 rport=27920 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.141 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995315.515:15932): pid=161882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=161883 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995315.516:15933): pid=161882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.141 addr=45.148.10.141 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995315.516:15934): pid=161882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=161882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995315.516:15935): pid=161882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.141 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780995320.983:15936): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780995320.983:15937): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780995320.985:15938): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=161934 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1780995321.040:15939): pid=161947 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780995321.040:15940): pid=161947 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65777779707A627169746262666868766F6A65647A777365626B6E746F797961203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780995321.041:15941): pid=161947 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780995321.045:15942): pid=161947 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780995326.013:15943): pid=162550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=162550 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995326.223:15944): pid=162545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=162550 suid=74 rport=55074 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995326.223:15945): pid=162545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=162550 suid=74 rport=55074 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995327.189:15946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995327.191:15947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995327.364:15948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995327.375:15949): pid=162545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=162550 suid=74 rport=55074 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995327.376:15950): pid=162545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=162550 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995327.377:15951): pid=162545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995327.377:15952): pid=162545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=162545 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995327.378:15953): pid=162545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995327.391:15954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995329.248:15955): pid=161947 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780995329.248:15956): pid=161947 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780995329.252:15957): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780995329.252:15958): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1780995330.186:15959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995330.189:15960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995330.192:15961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995330.338:15962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995330.392:15963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995330.406:15964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995342.183:15965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995342.186:15966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995342.588:15967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995342.696:15968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995345.183:15969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995345.354:15970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995358.182:15971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995358.185:15972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995358.347:15973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995358.404:15974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780995359.364:15975): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780995359.364:15976): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780995359.366:15977): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=164390 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780995359.559:15978): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780995359.559:15979): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1780995361.189:15980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995361.192:15981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995361.195:15982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995361.322:15983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995361.344:15984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995361.447:15985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995365.686:15986): pid=164962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=164962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995365.965:15987): pid=164961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=164962 suid=74 rport=52600 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995365.965:15988): pid=164961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=164962 suid=74 rport=52600 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995367.482:15989): pid=164961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=164962 suid=74 rport=52600 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995367.483:15990): pid=164961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=164962 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995367.483:15991): pid=164961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995367.484:15992): pid=164961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=164961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995367.484:15993): pid=164961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995373.185:15994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995373.188:15995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995373.514:15996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995373.555:15997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995376.182:15998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995376.346:15999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995389.183:16000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995389.186:16001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995389.338:16002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995389.421:16003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995392.186:16004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995392.190:16005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995392.193:16006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995392.367:16007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995392.420:16008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995392.545:16009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995404.187:16010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995404.190:16011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995404.537:16012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995404.620:16013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995407.186:16014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995407.326:16015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995419.620:16016): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=156200 suid=1000 rport=51770 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780995419.622:16017): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=156200 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780995419.624:16018): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780995419.625:16019): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780995419.625:16020): pid=156141 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=156141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1780995419.647:16021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995419.649:16022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995419.792:16023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995419.803:16024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995423.182:16025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995423.185:16026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995423.188:16027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995423.360:16028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995423.385:16029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995423.476:16030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995429.685:16031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995435.189:16032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995435.191:16033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995435.459:16034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995435.739:16035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995438.182:16036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995438.347:16037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995442.937:16038): pid=169089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=169089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995443.139:16039): pid=169088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=169089 suid=74 rport=48356 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995443.141:16040): pid=169088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=169089 suid=74 rport=48356 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995444.256:16041): pid=169088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=169089 suid=74 rport=48356 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995444.256:16042): pid=169088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=169089 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995444.257:16043): pid=169088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995444.258:16044): pid=169088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=169088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995444.258:16045): pid=169088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995450.009:16046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995450.012:16047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995450.106:16048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995450.152:16049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995454.188:16050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995454.191:16051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995454.194:16052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995454.365:16053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995454.398:16054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995454.491:16055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995466.183:16056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995466.186:16057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995466.563:16058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995466.676:16059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995469.180:16060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995469.366:16061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995480.181:16062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995480.183:16063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995480.303:16064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995480.427:16065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995485.190:16066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995485.194:16067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995485.196:16068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995485.363:16069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995485.389:16070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995485.418:16071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995489.322:16072): pid=171787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=171787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995489.595:16073): pid=171785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=171787 suid=74 rport=36730 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995489.595:16074): pid=171785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=171787 suid=74 rport=36730 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995491.069:16075): pid=171785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=171787 suid=74 rport=36730 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995491.070:16076): pid=171785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=171787 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995491.070:16077): pid=171785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995491.071:16078): pid=171785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=171785 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995491.071:16079): pid=171785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995497.181:16080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995497.183:16081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995497.480:16082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995497.627:16083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995500.181:16084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995500.367:16085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995511.183:16086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995511.186:16087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995511.358:16088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995511.412:16089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995516.185:16090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995516.188:16091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995516.191:16092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995516.362:16093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995516.392:16094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995516.418:16095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995528.183:16096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995528.187:16097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995528.500:16098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995528.624:16099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995531.186:16100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995531.378:16101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995542.183:16102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995542.186:16103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995542.297:16104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995542.362:16105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995547.182:16106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995547.185:16107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995547.188:16108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995547.349:16109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995547.404:16110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995547.516:16111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995559.189:16112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995559.192:16113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995559.474:16114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995559.705:16115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995561.760:16116): pid=175786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=175786 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995561.960:16117): pid=175785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=175786 suid=74 rport=57732 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995561.960:16118): pid=175785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=175786 suid=74 rport=57732 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995562.182:16119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995562.394:16120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995563.071:16121): pid=175785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=175786 suid=74 rport=57732 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995563.071:16122): pid=175785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=175786 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995563.072:16123): pid=175785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995563.072:16124): pid=175785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=175785 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995563.072:16125): pid=175785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995573.182:16126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995573.186:16127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995573.329:16128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995573.376:16129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995578.183:16130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995578.187:16131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995578.190:16132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995578.352:16133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995578.433:16134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995578.487:16135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995590.186:16136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995590.189:16137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995590.511:16138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995590.645:16139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995593.188:16140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995593.352:16141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995601.884:16142): pid=178052 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=CRED_ACQ msg=audit(1780995601.884:16143): pid=178052 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1780995601.886:16144): pid=178052 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780995601.886:16145): pid=178052 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780995604.183:16146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995604.186:16147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995604.357:16148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995604.373:16149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995609.189:16150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995609.193:16151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995609.197:16152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995609.381:16153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995609.409:16154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995609.501:16155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995620.102:16156): pid=179185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=179185 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995620.368:16157): pid=179184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=179185 suid=74 rport=49102 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995620.368:16158): pid=179184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=179185 suid=74 rport=49102 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780995621.182:16159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995621.186:16160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995621.490:16161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995621.727:16162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995621.799:16163): pid=179184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=179185 suid=74 rport=49102 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995621.799:16164): pid=179184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=179185 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995621.800:16165): pid=179184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995621.801:16166): pid=179184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=179184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995621.801:16167): pid=179184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995624.183:16168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995624.371:16169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780995632.909:16170): pid=178052 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1780995632.909:16171): pid=178052 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780995635.183:16172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995635.186:16173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995635.312:16174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995635.343:16175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995640.182:16176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995640.183:16177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995640.185:16178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995640.367:16179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995640.456:16180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995640.468:16181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995642.750:16182): pid=180406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180406 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995642.751:16183): pid=180405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180406 suid=74 rport=53578 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995642.752:16184): pid=180405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180406 suid=74 rport=53578 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995642.825:16185): pid=180405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995642.825:16186): pid=180405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995642.854:16187): pid=180405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995642.854:16188): pid=180405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180406 suid=74 rport=53578 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995642.857:16189): pid=180405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995642.857:16190): pid=180405 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=18 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995642.857:16190): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc16e83120 a2=1 a3=0 items=0 ppid=37599 pid=180405 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995642.857:16190): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995642.858:16191): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995642.911:16192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995642.957:16193): pid=180409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1780995642.957:16194): pid=180409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1780995642.958:16195): pid=180409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995642.958:16196): pid=180409 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=19 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995642.958:16196): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd323a9ea0 a2=1 a3=0 items=0 ppid=1 pid=180409 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995642.958:16196): proctitle="(systemd)"
type=USER_START msg=audit(1780995642.961:16197): pid=180409 uid=0 auid=0 ses=19 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1780995642.981:16198): prog-id=708 op=LOAD
type=SYSCALL msg=audit(1780995642.981:16198): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd01e724a0 a2=90 a3=0 items=0 ppid=1 pid=180409 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995642.981:16198): proctitle="(systemd)"
type=BPF msg=audit(1780995642.982:16199): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995642.982:16200): prog-id=709 op=LOAD
type=SYSCALL msg=audit(1780995642.982:16200): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd01e72540 a2=90 a3=4 items=0 ppid=1 pid=180409 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995642.982:16200): proctitle="(systemd)"
type=BPF msg=audit(1780995642.982:16201): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780995643.082:16202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995643.104:16203): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995643.106:16204): pid=180425 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180425 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995643.107:16205): pid=180425 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995643.150:16206): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995643.150:16207): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995643.153:16208): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995643.199:16209): pid=180426 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995643.200:16210): pid=180426 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995643.200:16211): pid=180426 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995643.204:16212): pid=180426 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995643.216:16213): pid=180426 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995643.217:16214): pid=180426 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995643.219:16215): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995643.219:16216): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995643.219:16217): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180425 suid=0 rport=53578 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995643.220:16218): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180425 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995643.221:16219): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995643.222:16220): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995643.222:16221): pid=180405 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995644.122:16222): pid=180516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180516 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995644.124:16223): pid=180515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180516 suid=74 rport=53586 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995644.124:16224): pid=180515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180516 suid=74 rport=53586 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995644.200:16225): pid=180515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995644.200:16226): pid=180515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995644.230:16227): pid=180515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995644.230:16228): pid=180515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180516 suid=74 rport=53586 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995644.233:16229): pid=180515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995644.233:16230): pid=180515 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=20 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995644.233:16230): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffed7a2c520 a2=1 a3=0 items=0 ppid=37599 pid=180515 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995644.233:16230): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995644.234:16231): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995644.269:16232): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995644.270:16233): pid=180531 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995644.271:16234): pid=180531 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995644.314:16235): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995644.314:16236): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995644.316:16237): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995644.382:16238): pid=180536 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995644.383:16239): pid=180536 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995644.384:16240): pid=180536 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995644.388:16241): pid=180536 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995644.399:16242): pid=180536 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995644.399:16243): pid=180536 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995644.401:16244): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180531 suid=0 rport=53586 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995644.402:16245): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995644.404:16246): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995644.404:16247): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995644.405:16248): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995644.405:16249): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995644.405:16250): pid=180515 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995644.991:16251): pid=180593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995644.993:16252): pid=180592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180593 suid=74 rport=53592 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995644.993:16253): pid=180592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180593 suid=74 rport=53592 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995645.065:16254): pid=180592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995645.065:16255): pid=180592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995645.092:16256): pid=180592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995645.093:16257): pid=180592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180593 suid=74 rport=53592 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995645.095:16258): pid=180592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995645.095:16259): pid=180592 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=21 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995645.095:16259): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff35625a70 a2=1 a3=0 items=0 ppid=37599 pid=180592 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995645.095:16259): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995645.097:16260): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995645.127:16261): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995645.128:16262): pid=180646 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995645.129:16263): pid=180646 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995645.171:16264): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995645.171:16265): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995645.172:16266): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995645.216:16267): pid=180647 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995645.216:16268): pid=180647 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6576616C7561746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995645.217:16269): pid=180647 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995645.220:16270): pid=180647 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995645.230:16271): pid=180647 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995645.231:16272): pid=180647 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995645.233:16273): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180646 suid=0 rport=53592 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995645.234:16274): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995645.235:16275): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995645.235:16276): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995645.236:16277): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995645.236:16278): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995645.236:16279): pid=180592 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180592 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995645.870:16280): pid=180681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995645.871:16281): pid=180680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180681 suid=74 rport=53602 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995645.871:16282): pid=180680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180681 suid=74 rport=53602 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995645.945:16283): pid=180680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995645.945:16284): pid=180680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995645.974:16285): pid=180680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995645.975:16286): pid=180680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180681 suid=74 rport=53602 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995645.977:16287): pid=180680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995645.977:16288): pid=180680 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=22 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995645.977:16288): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffef34a5a90 a2=1 a3=0 items=0 ppid=37599 pid=180680 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995645.977:16288): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995645.979:16289): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995646.014:16290): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995646.015:16291): pid=180683 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995646.015:16292): pid=180683 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995646.058:16293): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995646.058:16294): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995646.059:16295): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180697 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995646.112:16296): pid=180697 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995646.112:16297): pid=180697 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995646.112:16298): pid=180697 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995646.117:16299): pid=180697 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995646.126:16300): pid=180697 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995646.126:16301): pid=180697 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995646.128:16302): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180683 suid=0 rport=53602 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995646.129:16303): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995646.131:16304): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995646.131:16305): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995646.132:16306): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995646.132:16307): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995646.132:16308): pid=180680 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995646.759:16309): pid=180914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995646.761:16310): pid=180913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180914 suid=74 rport=53618 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995646.761:16311): pid=180913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180914 suid=74 rport=53618 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995646.840:16312): pid=180913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995646.840:16313): pid=180913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995646.869:16314): pid=180913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995646.869:16315): pid=180913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180914 suid=74 rport=53618 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995646.871:16316): pid=180913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995646.871:16317): pid=180913 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=23 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995646.871:16317): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe37d50000 a2=1 a3=0 items=0 ppid=37599 pid=180913 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995646.871:16317): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995646.872:16318): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995646.907:16319): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995646.908:16320): pid=180916 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995646.909:16321): pid=180916 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995646.952:16322): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995646.952:16323): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995646.955:16324): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995647.014:16325): pid=180917 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995647.014:16326): pid=180917 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6E6F7469666965722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995647.016:16327): pid=180917 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995647.020:16328): pid=180917 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995647.032:16329): pid=180917 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995647.033:16330): pid=180917 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995647.035:16331): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180916 suid=0 rport=53618 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995647.035:16332): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995647.038:16333): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995647.038:16334): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995647.038:16335): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995647.039:16336): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995647.039:16337): pid=180913 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995648.471:16338): pid=180994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995648.472:16339): pid=180993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180994 suid=74 rport=41304 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995648.472:16340): pid=180993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=180994 suid=74 rport=41304 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995648.549:16341): pid=180993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995648.549:16342): pid=180993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995648.578:16343): pid=180993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995648.578:16344): pid=180993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=180994 suid=74 rport=41304 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995648.580:16345): pid=180993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995648.580:16346): pid=180993 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=24 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995648.580:16346): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd1e4826c0 a2=1 a3=0 items=0 ppid=37599 pid=180993 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995648.580:16346): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995648.582:16347): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995648.612:16348): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995648.613:16349): pid=181004 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=181004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995648.614:16350): pid=181004 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995648.657:16351): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995648.657:16352): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995648.659:16353): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=181005 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995648.714:16354): pid=181005 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995648.715:16355): pid=181005 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995648.716:16356): pid=181005 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995648.720:16357): pid=181005 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995648.734:16358): pid=181005 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995648.735:16359): pid=181005 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995648.737:16360): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=181004 suid=0 rport=41304 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995648.737:16361): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=181004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995648.740:16362): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995648.740:16363): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995648.741:16364): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995648.741:16365): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995648.741:16366): pid=180993 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=180993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995652.186:16367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995652.188:16368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995652.483:16369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995652.635:16370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995655.182:16371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995655.373:16372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780995658.934:16373): pid=180411 uid=0 auid=0 ses=19 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1780995658.935:16374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995658.959:16375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995666.181:16376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995666.183:16377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995666.304:16378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995666.355:16379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995671.185:16380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995671.186:16381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995671.188:16382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995671.357:16383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995671.398:16384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995671.417:16385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995674.109:16386): pid=182318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995674.218:16387): pid=182317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=182318 suid=74 rport=57044 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995674.218:16388): pid=182317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=182318 suid=74 rport=57044 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995674.870:16389): pid=182317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182318 suid=74 rport=57044 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995674.870:16390): pid=182317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182318 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995674.871:16391): pid=182317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.118.39.236 addr=92.118.39.236 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995674.872:16392): pid=182317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182317 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995674.872:16393): pid=182317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995679.070:16394): pid=182618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995679.072:16395): pid=182617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182618 suid=74 rport=60372 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995679.072:16396): pid=182617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182618 suid=74 rport=60372 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995679.146:16397): pid=182617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995679.146:16398): pid=182617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995679.174:16399): pid=182617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995679.174:16400): pid=182617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182618 suid=74 rport=60372 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995679.176:16401): pid=182617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995679.176:16402): pid=182617 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=25 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995679.176:16402): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdb8d4efa0 a2=1 a3=0 items=0 ppid=37599 pid=182617 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995679.176:16402): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995679.177:16403): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995679.227:16404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995679.260:16405): pid=182621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1780995679.260:16406): pid=182621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1780995679.260:16407): pid=182621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995679.261:16408): pid=182621 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=26 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995679.261:16408): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd323a9ea0 a2=1 a3=0 items=0 ppid=1 pid=182621 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995679.261:16408): proctitle="(systemd)"
type=USER_START msg=audit(1780995679.263:16409): pid=182621 uid=0 auid=0 ses=26 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1780995679.281:16410): prog-id=710 op=LOAD
type=SYSCALL msg=audit(1780995679.281:16410): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd8b06eb30 a2=90 a3=0 items=0 ppid=1 pid=182621 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995679.281:16410): proctitle="(systemd)"
type=BPF msg=audit(1780995679.281:16411): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995679.281:16412): prog-id=711 op=LOAD
type=SYSCALL msg=audit(1780995679.281:16412): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd8b06ebd0 a2=90 a3=4 items=0 ppid=1 pid=182621 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995679.281:16412): proctitle="(systemd)"
type=BPF msg=audit(1780995679.281:16413): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780995679.388:16414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995679.412:16415): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995679.414:16416): pid=182645 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182645 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995679.415:16417): pid=182645 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995679.460:16418): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995679.460:16419): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995679.463:16420): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995679.522:16421): pid=182646 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995679.523:16422): pid=182646 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995679.523:16423): pid=182646 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995679.528:16424): pid=182646 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995679.541:16425): pid=182646 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995679.541:16426): pid=182646 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995679.543:16427): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995679.543:16428): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995679.543:16429): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182645 suid=0 rport=60372 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995679.544:16430): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182645 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995679.546:16431): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995679.547:16432): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995679.548:16433): pid=182617 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182617 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995680.370:16434): pid=182669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995680.371:16435): pid=182661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182669 suid=74 rport=60380 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995680.371:16436): pid=182661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182669 suid=74 rport=60380 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995680.442:16437): pid=182661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995680.442:16438): pid=182661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995680.470:16439): pid=182661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995680.470:16440): pid=182661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182669 suid=74 rport=60380 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995680.471:16441): pid=182661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995680.472:16442): pid=182661 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=27 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995680.472:16442): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1b9c88e0 a2=1 a3=0 items=0 ppid=37599 pid=182661 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995680.472:16442): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995680.473:16443): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995680.510:16444): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995680.511:16445): pid=182672 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995680.512:16446): pid=182672 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995680.555:16447): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995680.555:16448): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995680.557:16449): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995680.615:16450): pid=182673 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995680.616:16451): pid=182673 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995680.618:16452): pid=182673 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995680.622:16453): pid=182673 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995680.637:16454): pid=182673 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995680.638:16455): pid=182673 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995680.640:16456): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182672 suid=0 rport=60380 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995680.640:16457): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995680.643:16458): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995680.643:16459): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995680.644:16460): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995680.644:16461): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995680.644:16462): pid=182661 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995681.201:16463): pid=182691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995681.203:16464): pid=182690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182691 suid=74 rport=60384 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995681.203:16465): pid=182690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182691 suid=74 rport=60384 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995681.277:16466): pid=182690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995681.277:16467): pid=182690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995681.294:16468): pid=182690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995681.294:16469): pid=182690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182691 suid=74 rport=60384 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995681.296:16470): pid=182690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995681.296:16471): pid=182690 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=28 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995681.296:16471): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff232f0990 a2=1 a3=0 items=0 ppid=37599 pid=182690 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995681.296:16471): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995681.297:16472): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995681.321:16473): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995681.321:16474): pid=182693 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995681.322:16475): pid=182693 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995681.365:16476): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995681.365:16477): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995681.366:16478): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995681.413:16479): pid=182694 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995681.413:16480): pid=182694 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F6865616C74685F6D616E616765722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995681.413:16481): pid=182694 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995681.415:16482): pid=182694 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995681.424:16483): pid=182694 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995681.424:16484): pid=182694 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995681.426:16485): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182693 suid=0 rport=60384 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995681.426:16486): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995681.428:16487): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995681.428:16488): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995681.429:16489): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995681.429:16490): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995681.429:16491): pid=182690 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182690 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995681.679:16492): pid=182718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995681.876:16493): pid=182717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182718 suid=74 rport=57272 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995681.876:16494): pid=182717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182718 suid=74 rport=57272 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995681.987:16495): pid=182720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995681.988:16496): pid=182719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182720 suid=74 rport=60394 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995681.988:16497): pid=182719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182720 suid=74 rport=60394 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995682.068:16498): pid=182719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995682.068:16499): pid=182719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995682.098:16500): pid=182719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995682.098:16501): pid=182719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182720 suid=74 rport=60394 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995682.101:16502): pid=182719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995682.102:16503): pid=182719 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=29 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995682.102:16503): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe43c81d70 a2=1 a3=0 items=0 ppid=37599 pid=182719 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995682.102:16503): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995682.103:16504): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995682.133:16505): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995682.135:16506): pid=182743 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995682.135:16507): pid=182743 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995682.177:16508): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995682.177:16509): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995682.179:16510): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995682.232:16511): pid=182772 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995682.232:16512): pid=182772 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F727379736C6F672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995682.233:16513): pid=182772 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995682.237:16514): pid=182772 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995682.250:16515): pid=182772 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995682.250:16516): pid=182772 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995682.252:16517): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182743 suid=0 rport=60394 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995682.253:16518): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995682.255:16519): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995682.256:16520): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995682.256:16521): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995682.256:16522): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995682.256:16523): pid=182719 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995682.773:16524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995682.776:16525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995682.866:16526): pid=182845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995682.867:16527): pid=182842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182845 suid=74 rport=60410 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995682.867:16528): pid=182842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182845 suid=74 rport=60410 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995682.951:16529): pid=182842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995682.951:16530): pid=182842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995682.962:16531): pid=182717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182718 suid=74 rport=57272 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995682.962:16532): pid=182717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182718 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995682.964:16533): pid=182717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995682.964:16534): pid=182717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182717 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995682.965:16535): pid=182717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995682.984:16536): pid=182842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995682.985:16537): pid=182842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182845 suid=74 rport=60410 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995682.987:16538): pid=182842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995682.987:16539): pid=182842 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=30 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995682.987:16539): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc06d295f0 a2=1 a3=0 items=0 ppid=37599 pid=182842 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995682.987:16539): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995682.989:16540): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995683.019:16541): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995683.021:16542): pid=182882 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995683.022:16543): pid=182882 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995683.066:16544): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995683.066:16545): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995683.069:16546): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995683.132:16547): pid=182913 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995683.133:16548): pid=182913 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F6472697665725F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995683.134:16549): pid=182913 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995683.138:16550): pid=182913 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995683.152:16551): pid=182913 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995683.152:16552): pid=182913 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1780995683.155:16553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995683.156:16554): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182882 suid=0 rport=60410 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995683.156:16555): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995683.159:16556): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995683.159:16557): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995683.160:16558): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995683.160:16559): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995683.160:16560): pid=182842 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995683.192:16561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995683.737:16562): pid=182967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995683.738:16563): pid=182966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182967 suid=74 rport=60424 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995683.738:16564): pid=182966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=182967 suid=74 rport=60424 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995683.812:16565): pid=182966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995683.812:16566): pid=182966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995683.840:16567): pid=182966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995683.841:16568): pid=182966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182967 suid=74 rport=60424 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995683.843:16569): pid=182966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995683.843:16570): pid=182966 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=31 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995683.843:16570): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc468bed30 a2=1 a3=0 items=0 ppid=37599 pid=182966 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995683.843:16570): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995683.845:16571): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995683.872:16572): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995683.873:16573): pid=182997 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995683.874:16574): pid=182997 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995683.917:16575): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995683.917:16576): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995683.918:16577): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995683.981:16578): pid=182998 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995683.981:16579): pid=182998 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F686F7573656B656570696E672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995683.982:16580): pid=182998 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995683.986:16581): pid=182998 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995683.998:16582): pid=182998 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995683.999:16583): pid=182998 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995684.001:16584): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=182997 suid=0 rport=60424 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995684.001:16585): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995684.003:16586): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995684.004:16587): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995684.005:16588): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995684.005:16589): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995684.005:16590): pid=182966 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=182966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995684.602:16591): pid=183032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995684.604:16592): pid=183031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183032 suid=74 rport=60426 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995684.604:16593): pid=183031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183032 suid=74 rport=60426 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995684.678:16594): pid=183031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995684.678:16595): pid=183031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995684.709:16596): pid=183031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995684.709:16597): pid=183031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183032 suid=74 rport=60426 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995684.712:16598): pid=183031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995684.713:16599): pid=183031 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=32 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995684.713:16599): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd3fc33ec0 a2=1 a3=0 items=0 ppid=37599 pid=183031 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995684.713:16599): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995684.714:16600): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995684.743:16601): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995684.744:16602): pid=183034 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995684.745:16603): pid=183034 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995684.789:16604): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995684.789:16605): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995684.791:16606): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183036 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995684.849:16607): pid=183036 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995684.850:16608): pid=183036 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995684.851:16609): pid=183036 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995684.854:16610): pid=183036 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995684.866:16611): pid=183036 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995684.867:16612): pid=183036 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995684.869:16613): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183034 suid=0 rport=60426 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995684.870:16614): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995684.872:16615): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995684.872:16616): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995684.873:16617): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995684.873:16618): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995684.873:16619): pid=183031 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995685.441:16620): pid=183052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995685.443:16621): pid=183051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183052 suid=74 rport=60432 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995685.443:16622): pid=183051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183052 suid=74 rport=60432 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995685.517:16623): pid=183051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995685.517:16624): pid=183051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995685.546:16625): pid=183051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995685.546:16626): pid=183051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183052 suid=74 rport=60432 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995685.549:16627): pid=183051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995685.549:16628): pid=183051 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=33 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995685.549:16628): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe6f4a0430 a2=1 a3=0 items=0 ppid=37599 pid=183051 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995685.549:16628): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995685.550:16629): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995685.574:16630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995685.589:16631): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995685.590:16632): pid=183068 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995685.591:16633): pid=183068 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995685.633:16634): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995685.633:16635): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995685.635:16636): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183074 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995685.697:16637): pid=183074 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995685.698:16638): pid=183074 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995685.699:16639): pid=183074 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995685.703:16640): pid=183074 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995685.719:16641): pid=183074 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995685.719:16642): pid=183074 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995685.721:16643): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183068 suid=0 rport=60432 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995685.722:16644): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995685.725:16645): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995685.726:16646): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995685.726:16647): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995685.726:16648): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995685.726:16649): pid=183051 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995685.782:16650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995686.278:16651): pid=183120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995686.279:16652): pid=183119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183120 suid=74 rport=60440 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995686.280:16653): pid=183119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183120 suid=74 rport=60440 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995686.354:16654): pid=183119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995686.354:16655): pid=183119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995686.384:16656): pid=183119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995686.384:16657): pid=183119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183120 suid=74 rport=60440 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995686.387:16658): pid=183119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995686.387:16659): pid=183119 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=34 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995686.387:16659): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffe8c0be80 a2=1 a3=0 items=0 ppid=37599 pid=183119 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=34 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995686.387:16659): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995686.388:16660): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995686.427:16661): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995686.428:16662): pid=183279 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995686.429:16663): pid=183279 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995686.471:16664): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995686.471:16665): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995686.473:16666): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995686.531:16667): pid=183287 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995686.531:16668): pid=183287 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F6261636B656E645F62696E64392E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995686.532:16669): pid=183287 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995686.535:16670): pid=183287 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995686.550:16671): pid=183287 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995686.550:16672): pid=183287 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995686.552:16673): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183279 suid=0 rport=60440 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995686.553:16674): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995686.555:16675): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995686.555:16676): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995686.556:16677): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995686.556:16678): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995686.556:16679): pid=183119 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995687.107:16680): pid=183352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995687.108:16681): pid=183351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183352 suid=74 rport=60442 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995687.108:16682): pid=183351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183352 suid=74 rport=60442 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995687.183:16683): pid=183351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995687.183:16684): pid=183351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995687.212:16685): pid=183351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995687.212:16686): pid=183351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183352 suid=74 rport=60442 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995687.214:16687): pid=183351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995687.215:16688): pid=183351 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=35 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995687.215:16688): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe91e19650 a2=1 a3=0 items=0 ppid=37599 pid=183351 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=35 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995687.215:16688): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995687.217:16689): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995687.253:16690): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995687.255:16691): pid=183354 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995687.256:16692): pid=183354 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995687.298:16693): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995687.298:16694): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995687.300:16695): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995687.371:16696): pid=183355 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995687.371:16697): pid=183355 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995687.372:16698): pid=183355 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995687.374:16699): pid=183355 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995687.390:16700): pid=183355 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995687.390:16701): pid=183355 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995687.393:16702): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183354 suid=0 rport=60442 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995687.394:16703): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995687.396:16704): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995687.396:16705): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995687.397:16706): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995687.397:16707): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995687.397:16708): pid=183351 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183351 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995687.968:16709): pid=183432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183432 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995687.970:16710): pid=183431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183432 suid=74 rport=60458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995687.970:16711): pid=183431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183432 suid=74 rport=60458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995688.044:16712): pid=183431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995688.044:16713): pid=183431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995688.072:16714): pid=183431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995688.073:16715): pid=183431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183432 suid=74 rport=60458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995688.075:16716): pid=183431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995688.075:16717): pid=183431 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=36 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995688.075:16717): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcc3531060 a2=1 a3=0 items=0 ppid=37599 pid=183431 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=36 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995688.075:16717): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995688.077:16718): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995688.101:16719): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995688.102:16720): pid=183434 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183434 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995688.103:16721): pid=183434 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995688.147:16722): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995688.147:16723): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995688.150:16724): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995688.208:16725): pid=183435 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995688.209:16726): pid=183435 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F6D646E732E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995688.209:16727): pid=183435 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995688.212:16728): pid=183435 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995688.227:16729): pid=183435 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995688.227:16730): pid=183435 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995688.229:16731): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183434 suid=0 rport=60458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995688.229:16732): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183434 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995688.232:16733): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995688.232:16734): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995688.233:16735): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995688.233:16736): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995688.233:16737): pid=183431 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183431 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995688.759:16738): pid=183459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995688.760:16739): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183459 suid=74 rport=51162 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995688.760:16740): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183459 suid=74 rport=51162 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995688.841:16741): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995688.841:16742): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995688.869:16743): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995688.869:16744): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183459 suid=74 rport=51162 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995688.871:16745): pid=183458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995688.871:16746): pid=183458 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=37 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995688.871:16746): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd833bc950 a2=1 a3=0 items=0 ppid=37599 pid=183458 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=37 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995688.871:16746): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995688.873:16747): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995688.900:16748): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995688.901:16749): pid=183461 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995688.903:16750): pid=183461 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995688.945:16751): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995688.945:16752): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995688.947:16753): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995688.991:16754): pid=183462 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995688.991:16755): pid=183462 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F70726F64756365722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995688.991:16756): pid=183462 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995688.993:16757): pid=183462 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995689.004:16758): pid=183462 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995689.004:16759): pid=183462 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995689.005:16760): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183461 suid=0 rport=51162 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995689.006:16761): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995689.007:16762): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995689.008:16763): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995689.008:16764): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995689.008:16765): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995689.008:16766): pid=183458 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995689.567:16767): pid=183478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995689.569:16768): pid=183477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183478 suid=74 rport=51170 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995689.569:16769): pid=183477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183478 suid=74 rport=51170 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995689.641:16770): pid=183477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995689.641:16771): pid=183477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995689.666:16772): pid=183477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995689.666:16773): pid=183477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183478 suid=74 rport=51170 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995689.669:16774): pid=183477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995689.669:16775): pid=183477 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=38 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995689.669:16775): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec7471640 a2=1 a3=0 items=0 ppid=37599 pid=183477 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=38 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995689.669:16775): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995689.671:16776): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995689.706:16777): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995689.707:16778): pid=183488 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995689.708:16779): pid=183488 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995689.750:16780): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995689.750:16781): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995689.751:16782): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183489 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995689.810:16783): pid=183489 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995689.810:16784): pid=183489 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995689.811:16785): pid=183489 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995689.814:16786): pid=183489 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995689.822:16787): pid=183489 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995689.822:16788): pid=183489 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995689.824:16789): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183488 suid=0 rport=51170 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995689.824:16790): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995689.826:16791): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995689.826:16792): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995689.826:16793): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995689.826:16794): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995689.827:16795): pid=183477 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995690.428:16796): pid=183505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995690.430:16797): pid=183504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183505 suid=74 rport=51180 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995690.430:16798): pid=183504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183505 suid=74 rport=51180 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995690.511:16799): pid=183504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995690.511:16800): pid=183504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995690.540:16801): pid=183504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995690.541:16802): pid=183504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183505 suid=74 rport=51180 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995690.542:16803): pid=183504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995690.543:16804): pid=183504 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=39 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995690.543:16804): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeb5e957a0 a2=1 a3=0 items=0 ppid=37599 pid=183504 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=39 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995690.543:16804): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995690.544:16805): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995690.579:16806): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995690.580:16807): pid=183507 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995690.581:16808): pid=183507 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995690.623:16809): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995690.623:16810): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995690.624:16811): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995690.672:16812): pid=183508 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995690.672:16813): pid=183508 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F756E626F756E642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995690.672:16814): pid=183508 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995690.674:16815): pid=183508 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995690.686:16816): pid=183508 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995690.686:16817): pid=183508 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995690.688:16818): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183507 suid=0 rport=51180 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995690.688:16819): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995690.690:16820): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995690.690:16821): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995690.691:16822): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995690.691:16823): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995690.691:16824): pid=183504 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183504 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995695.070:16825): pid=183566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183566 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995695.072:16826): pid=183565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183566 suid=74 rport=51194 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995695.072:16827): pid=183565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=183566 suid=74 rport=51194 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995695.146:16828): pid=183565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995695.146:16829): pid=183565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995695.174:16830): pid=183565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995695.174:16831): pid=183565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183566 suid=74 rport=51194 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995695.177:16832): pid=183565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995695.177:16833): pid=183565 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=40 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995695.177:16833): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff4a546500 a2=1 a3=0 items=0 ppid=37599 pid=183565 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=40 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995695.177:16833): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995695.179:16834): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995695.206:16835): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995695.207:16836): pid=183589 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995695.208:16837): pid=183589 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995695.251:16838): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995695.251:16839): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995695.253:16840): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995695.314:16841): pid=183618 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995695.314:16842): pid=183618 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F686F72697A6F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995695.314:16843): pid=183618 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995695.318:16844): pid=183618 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995695.332:16845): pid=183618 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995695.332:16846): pid=183618 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995695.334:16847): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=183589 suid=0 rport=51194 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995695.336:16848): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995695.338:16849): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995695.339:16850): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995695.340:16851): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995695.340:16852): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995695.340:16853): pid=183565 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=183565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995697.184:16854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995697.188:16855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995697.346:16856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995697.390:16857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995699.826:16858): pid=184127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995699.828:16859): pid=184126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184127 suid=74 rport=53458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995699.828:16860): pid=184126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184127 suid=74 rport=53458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995699.903:16861): pid=184126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995699.904:16862): pid=184126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995699.931:16863): pid=184126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995699.932:16864): pid=184126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184127 suid=74 rport=53458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995699.935:16865): pid=184126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995699.935:16866): pid=184126 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=41 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995699.935:16866): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb4416140 a2=1 a3=0 items=0 ppid=37599 pid=184126 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=41 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995699.935:16866): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995699.937:16867): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995699.963:16868): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995699.965:16869): pid=184137 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995699.965:16870): pid=184137 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995700.009:16871): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995700.009:16872): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995700.013:16873): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995700.077:16874): pid=184138 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995700.077:16875): pid=184138 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6B657973746F6E652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995700.080:16876): pid=184138 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995700.084:16877): pid=184138 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995700.098:16878): pid=184138 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995700.098:16879): pid=184138 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995700.101:16880): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184137 suid=0 rport=53458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995700.101:16881): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995700.104:16882): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995700.104:16883): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995700.105:16884): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995700.105:16885): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995700.105:16886): pid=184126 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995700.738:16887): pid=184154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995700.740:16888): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184154 suid=74 rport=53474 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995700.740:16889): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184154 suid=74 rport=53474 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995700.815:16890): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995700.815:16891): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995700.835:16892): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995700.836:16893): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184154 suid=74 rport=53474 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995700.838:16894): pid=184153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995700.838:16895): pid=184153 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=42 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995700.838:16895): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea9399b50 a2=1 a3=0 items=0 ppid=37599 pid=184153 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=42 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995700.838:16895): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995700.839:16896): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995700.871:16897): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995700.872:16898): pid=184158 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184158 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995700.873:16899): pid=184158 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995700.915:16900): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995700.915:16901): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995700.917:16902): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995700.981:16903): pid=184159 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995700.982:16904): pid=184159 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F626172626963616E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995700.983:16905): pid=184159 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995700.987:16906): pid=184159 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995701.004:16907): pid=184159 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995701.004:16908): pid=184159 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995701.007:16909): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184158 suid=0 rport=53474 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995701.007:16910): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184158 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995701.010:16911): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995701.010:16912): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995701.010:16913): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995701.010:16914): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995701.010:16915): pid=184153 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995701.428:16916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995701.431:16917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995701.433:16918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995701.647:16919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995701.653:16920): pid=184287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995701.654:16921): pid=184285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184287 suid=74 rport=53478 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995701.655:16922): pid=184285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184287 suid=74 rport=53478 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780995701.679:16923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780995701.729:16924): pid=184285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995701.729:16925): pid=184285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995701.765:16926): pid=184285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995701.765:16927): pid=184285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184287 suid=74 rport=53478 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995701.767:16928): pid=184285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995701.768:16929): pid=184285 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=43 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995701.768:16929): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc15c9d190 a2=1 a3=0 items=0 ppid=37599 pid=184285 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=43 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995701.768:16929): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995701.769:16930): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995701.798:16931): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995701.799:16932): pid=184326 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184326 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995701.800:16933): pid=184326 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1780995701.808:16934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1780995701.845:16935): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995701.845:16936): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995701.847:16937): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995701.900:16938): pid=184339 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995701.900:16939): pid=184339 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F626172626963616E5F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995701.901:16940): pid=184339 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995701.905:16941): pid=184339 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995701.914:16942): pid=184339 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995701.914:16943): pid=184339 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995701.916:16944): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184326 suid=0 rport=53478 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995701.917:16945): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184326 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995701.919:16946): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995701.919:16947): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995701.920:16948): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995701.920:16949): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995701.920:16950): pid=184285 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184285 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995702.529:16951): pid=184383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995702.531:16952): pid=184382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184383 suid=74 rport=53488 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995702.531:16953): pid=184382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184383 suid=74 rport=53488 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995702.604:16954): pid=184382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995702.605:16955): pid=184382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995702.634:16956): pid=184382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995702.635:16957): pid=184382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184383 suid=74 rport=53488 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995702.637:16958): pid=184382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995702.637:16959): pid=184382 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=44 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995702.637:16959): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc77c53ce0 a2=1 a3=0 items=0 ppid=37599 pid=184382 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=44 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995702.637:16959): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995702.639:16960): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995702.670:16961): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995702.671:16962): pid=184385 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995702.672:16963): pid=184385 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995702.716:16964): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995702.716:16965): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995702.718:16966): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995702.777:16967): pid=184386 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995702.777:16968): pid=184386 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F626172626963616E5F6B657973746F6E655F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995702.778:16969): pid=184386 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995702.781:16970): pid=184386 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995702.790:16971): pid=184386 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995702.791:16972): pid=184386 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995702.793:16973): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184385 suid=0 rport=53488 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995702.794:16974): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995702.796:16975): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995702.796:16976): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995702.797:16977): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995702.797:16978): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995702.797:16979): pid=184382 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995707.080:16980): pid=184643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995707.082:16981): pid=184642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184643 suid=74 rport=53494 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995707.082:16982): pid=184642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184643 suid=74 rport=53494 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995707.156:16983): pid=184642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995707.157:16984): pid=184642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995707.185:16985): pid=184642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995707.185:16986): pid=184642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184643 suid=74 rport=53494 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995707.187:16987): pid=184642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995707.188:16988): pid=184642 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=45 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995707.188:16988): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff99b27430 a2=1 a3=0 items=0 ppid=37599 pid=184642 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=45 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995707.188:16988): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995707.189:16989): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995707.221:16990): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995707.222:16991): pid=184653 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184653 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995707.223:16992): pid=184653 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995707.266:16993): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995707.266:16994): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995707.268:16995): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995707.329:16996): pid=184654 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995707.329:16997): pid=184654 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995707.330:16998): pid=184654 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995707.333:16999): pid=184654 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995707.346:17000): pid=184654 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995707.346:17001): pid=184654 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995707.348:17002): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184653 suid=0 rport=53494 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995707.349:17003): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184653 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995707.351:17004): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995707.351:17005): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995707.351:17006): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995707.351:17007): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995707.351:17008): pid=184642 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995708.601:17009): pid=184780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995708.602:17010): pid=184779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184780 suid=74 rport=46478 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995708.602:17011): pid=184779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184780 suid=74 rport=46478 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995708.677:17012): pid=184779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995708.677:17013): pid=184779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995708.705:17014): pid=184779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995708.705:17015): pid=184779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184780 suid=74 rport=46478 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995708.707:17016): pid=184779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995708.708:17017): pid=184779 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=46 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995708.708:17017): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe86d94070 a2=1 a3=0 items=0 ppid=37599 pid=184779 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=46 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995708.708:17017): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995708.709:17018): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995708.740:17019): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995708.741:17020): pid=184789 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995708.742:17021): pid=184789 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995708.785:17022): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995708.785:17023): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995708.786:17024): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995708.843:17025): pid=184799 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995708.843:17026): pid=184799 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995708.844:17027): pid=184799 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995708.847:17028): pid=184799 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995708.858:17029): pid=184799 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995708.858:17030): pid=184799 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995708.861:17031): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184789 suid=0 rport=46478 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995708.862:17032): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995708.864:17033): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995708.864:17034): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995708.865:17035): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995708.865:17036): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995708.866:17037): pid=184779 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184779 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995712.539:17038): pid=184961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995712.540:17039): pid=184960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184961 suid=74 rport=46486 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995712.540:17040): pid=184960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=184961 suid=74 rport=46486 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995712.618:17041): pid=184960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995712.618:17042): pid=184960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995712.647:17043): pid=184960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995712.647:17044): pid=184960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184961 suid=74 rport=46486 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995712.650:17045): pid=184960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995712.650:17046): pid=184960 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=47 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995712.650:17046): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd04c91940 a2=1 a3=0 items=0 ppid=37599 pid=184960 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=47 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995712.650:17046): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995712.651:17047): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995712.689:17048): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995712.690:17049): pid=184963 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995712.691:17050): pid=184963 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995712.734:17051): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995712.734:17052): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995712.736:17053): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995712.797:17054): pid=184964 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995712.797:17055): pid=184964 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995712.798:17056): pid=184964 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995712.801:17057): pid=184964 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995712.813:17058): pid=184964 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995712.814:17059): pid=184964 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995712.816:17060): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=184963 suid=0 rport=46486 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995712.816:17061): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995712.819:17062): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995712.819:17063): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995712.819:17064): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995712.819:17065): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995712.819:17066): pid=184960 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=184960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995713.190:17067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995713.287:17068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995713.450:17069): pid=185039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995713.451:17070): pid=185038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=185039 suid=74 rport=46498 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995713.451:17071): pid=185038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=185039 suid=74 rport=46498 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995713.525:17072): pid=185038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995713.526:17073): pid=185038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995713.535:17074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995713.543:17075): pid=185038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995713.543:17076): pid=185038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185039 suid=74 rport=46498 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995713.545:17077): pid=185038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995713.546:17078): pid=185038 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=48 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995713.546:17078): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc88cee490 a2=1 a3=0 items=0 ppid=37599 pid=185038 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=48 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995713.546:17078): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995713.547:17079): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995713.578:17080): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995713.579:17081): pid=185044 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995713.580:17082): pid=185044 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995713.622:17083): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995713.622:17084): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995713.623:17085): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995713.648:17086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995713.678:17087): pid=185046 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995713.679:17088): pid=185046 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F766F6C756D652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995713.680:17089): pid=185046 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995713.683:17090): pid=185046 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995713.693:17091): pid=185046 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995713.694:17092): pid=185046 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995713.697:17093): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185044 suid=0 rport=46498 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995713.697:17094): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995713.699:17095): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995713.699:17096): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995713.699:17097): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995713.699:17098): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995713.699:17099): pid=185038 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995714.302:17100): pid=185063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185063 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995714.304:17101): pid=185062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=185063 suid=74 rport=46502 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995714.304:17102): pid=185062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=185063 suid=74 rport=46502 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995714.383:17103): pid=185062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995714.383:17104): pid=185062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995714.401:17105): pid=185062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995714.401:17106): pid=185062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185063 suid=74 rport=46502 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995714.403:17107): pid=185062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995714.403:17108): pid=185062 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=49 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995714.403:17108): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcaa31e000 a2=1 a3=0 items=0 ppid=37599 pid=185062 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=49 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995714.403:17108): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995714.404:17109): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995714.433:17110): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995714.434:17111): pid=185073 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995714.435:17112): pid=185073 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995714.479:17113): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995714.479:17114): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995714.480:17115): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185074 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995714.531:17116): pid=185074 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995714.531:17117): pid=185074 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F6261636B75702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995714.532:17118): pid=185074 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995714.535:17119): pid=185074 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995714.545:17120): pid=185074 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995714.545:17121): pid=185074 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995714.547:17122): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185073 suid=0 rport=46502 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995714.548:17123): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995714.550:17124): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995714.551:17125): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995714.551:17126): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995714.551:17127): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995714.552:17128): pid=185062 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995715.812:17129): pid=185098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185098 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995715.813:17130): pid=185097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=185098 suid=74 rport=46518 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995715.813:17131): pid=185097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=185098 suid=74 rport=46518 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995715.883:17132): pid=185097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995715.883:17133): pid=185097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995715.911:17134): pid=185097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995715.912:17135): pid=185097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185098 suid=74 rport=46518 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995715.913:17136): pid=185097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995715.914:17137): pid=185097 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=50 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995715.914:17137): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd08b37440 a2=1 a3=0 items=0 ppid=37599 pid=185097 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=50 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995715.914:17137): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995715.915:17138): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995715.936:17139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995715.950:17140): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995715.952:17141): pid=185106 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185106 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995715.953:17142): pid=185106 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995715.995:17143): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995715.995:17144): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995715.997:17145): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995716.094:17146): pid=185111 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995716.094:17147): pid=185111 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F636F6C6C656374642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995716.095:17148): pid=185111 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995716.098:17149): pid=185111 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995716.109:17150): pid=185111 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995716.110:17151): pid=185111 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995716.112:17152): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185106 suid=0 rport=46518 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995716.112:17153): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185106 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995716.117:17154): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995716.117:17155): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995716.117:17156): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995716.117:17157): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995716.117:17158): pid=185097 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185097 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995716.122:17159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995716.134:17160): pid=185156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185156 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995716.135:17161): pid=185155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=185156 suid=74 rport=46530 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995716.135:17162): pid=185155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=185156 suid=74 rport=46530 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995716.211:17163): pid=185155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995716.211:17164): pid=185155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995716.239:17165): pid=185155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995716.239:17166): pid=185155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185156 suid=74 rport=46530 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995716.241:17167): pid=185155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995716.242:17168): pid=185155 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=51 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995716.242:17168): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc98e67680 a2=1 a3=0 items=0 ppid=37599 pid=185155 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=51 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995716.242:17168): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995716.243:17169): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995716.275:17170): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995716.277:17171): pid=185158 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185158 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995716.277:17172): pid=185158 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995716.320:17173): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995716.320:17174): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995716.322:17175): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995716.380:17176): pid=185159 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995716.381:17177): pid=185159 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F636F6C6C656374642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995716.382:17178): pid=185159 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995716.386:17179): pid=185159 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995727.437:17180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995727.440:17181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995727.495:17182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995727.580:17183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995731.682:17184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995731.686:17185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995731.808:17186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995731.828:17187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995731.934:17188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995732.057:17189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995743.937:17190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995743.940:17191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995744.175:17192): pid=186690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=186690 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1780995744.241:17193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995744.397:17194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780995744.450:17195): pid=186689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=186690 suid=74 rport=33228 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995744.451:17196): pid=186689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=186690 suid=74 rport=33228 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995745.915:17197): pid=186689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=186690 suid=74 rport=33228 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995745.915:17198): pid=186689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=186690 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995745.916:17199): pid=186689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995745.916:17200): pid=186689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=186689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995745.917:17201): pid=186689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995746.189:17202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995746.387:17203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995757.935:17204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995757.940:17205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995758.051:17206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6f5805c5be23e1a3965c91359cdfc2fae1df2082dc4f3bd2d592f77e584d470d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995758.105:17207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780995758.525:17208): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1780995758.768:17209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_collectd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995758.773:17210): pid=185159 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995758.773:17211): pid=185159 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995758.777:17212): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=185158 suid=0 rport=46530 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995758.777:17213): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185158 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995758.781:17214): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995758.781:17215): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995758.782:17216): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995758.782:17217): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995758.782:17218): pid=185155 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=185155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995761.891:17219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995761.979:17220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995762.078:17221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995762.114:17222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995762.153:17223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995762.259:17224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995764.736:17225): pid=188033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995764.738:17226): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188033 suid=74 rport=41528 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995764.738:17227): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188033 suid=74 rport=41528 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995764.810:17228): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995764.810:17229): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995764.842:17230): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995764.842:17231): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188033 suid=74 rport=41528 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995764.844:17232): pid=188032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995764.845:17233): pid=188032 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=52 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995764.845:17233): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff694bf9e0 a2=1 a3=0 items=0 ppid=37599 pid=188032 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=52 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995764.845:17233): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995764.846:17234): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995764.886:17235): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995764.887:17236): pid=188035 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188035 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995764.888:17237): pid=188035 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995764.932:17238): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995764.932:17239): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995764.934:17240): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188036 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995764.990:17241): pid=188036 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995764.991:17242): pid=188036 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676C616E63655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995764.994:17243): pid=188036 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995764.999:17244): pid=188036 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995765.014:17245): pid=188036 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995765.015:17246): pid=188036 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995765.018:17247): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188035 suid=0 rport=41528 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995765.018:17248): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188035 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995765.021:17249): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995765.021:17250): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995765.022:17251): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995765.022:17252): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995765.022:17253): pid=188032 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995765.627:17254): pid=188052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995765.628:17255): pid=188051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188052 suid=74 rport=41536 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995765.628:17256): pid=188051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188052 suid=74 rport=41536 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995765.713:17257): pid=188051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995765.713:17258): pid=188051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995765.730:17259): pid=188051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995765.730:17260): pid=188051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188052 suid=74 rport=41536 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995765.733:17261): pid=188051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995765.733:17262): pid=188051 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=53 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995765.733:17262): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff89646510 a2=1 a3=0 items=0 ppid=37599 pid=188051 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=53 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995765.733:17262): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995765.734:17263): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995765.766:17264): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995765.767:17265): pid=188062 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995765.768:17266): pid=188062 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995765.811:17267): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995765.811:17268): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995765.814:17269): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188063 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995765.877:17270): pid=188063 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995765.877:17271): pid=188063 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676E6F636368695F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995765.878:17272): pid=188063 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995765.881:17273): pid=188063 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995765.895:17274): pid=188063 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995765.896:17275): pid=188063 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995765.898:17276): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188062 suid=0 rport=41536 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995765.898:17277): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995765.901:17278): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995765.902:17279): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995765.903:17280): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995765.903:17281): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995765.903:17282): pid=188051 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995766.547:17283): pid=188079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995766.548:17284): pid=188078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188079 suid=74 rport=41546 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995766.549:17285): pid=188078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188079 suid=74 rport=41546 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995766.625:17286): pid=188078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995766.625:17287): pid=188078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995766.655:17288): pid=188078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995766.655:17289): pid=188078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188079 suid=74 rport=41546 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995766.657:17290): pid=188078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995766.657:17291): pid=188078 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=54 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995766.657:17291): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff3c0c2ac0 a2=1 a3=0 items=0 ppid=37599 pid=188078 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=54 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995766.657:17291): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995766.659:17292): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995766.684:17293): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995766.685:17294): pid=188081 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188081 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995766.686:17295): pid=188081 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995766.729:17296): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995766.729:17297): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995766.731:17298): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188090 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995766.792:17299): pid=188090 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995766.793:17300): pid=188090 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676E6F636368695F6D6574726963642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995766.794:17301): pid=188090 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995766.797:17302): pid=188090 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995766.808:17303): pid=188090 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995766.809:17304): pid=188090 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995766.811:17305): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188081 suid=0 rport=41546 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995766.811:17306): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188081 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995766.814:17307): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995766.814:17308): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995766.815:17309): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995766.815:17310): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995766.815:17311): pid=188078 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995767.445:17312): pid=188311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995767.446:17313): pid=188310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188311 suid=74 rport=41560 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995767.446:17314): pid=188310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188311 suid=74 rport=41560 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995767.520:17315): pid=188310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995767.520:17316): pid=188310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995767.548:17317): pid=188310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995767.548:17318): pid=188310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188311 suid=74 rport=41560 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995767.550:17319): pid=188310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995767.550:17320): pid=188310 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=55 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995767.550:17320): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc5fd374d0 a2=1 a3=0 items=0 ppid=37599 pid=188310 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=55 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995767.550:17320): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995767.552:17321): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995767.579:17322): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995767.581:17323): pid=188313 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188313 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995767.582:17324): pid=188313 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995767.624:17325): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995767.624:17326): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995767.625:17327): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188314 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995767.678:17328): pid=188314 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995767.679:17329): pid=188314 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676E6F636368695F7374617473642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995767.680:17330): pid=188314 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995767.683:17331): pid=188314 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995767.694:17332): pid=188314 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995767.695:17333): pid=188314 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995767.697:17334): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188313 suid=0 rport=41560 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995767.697:17335): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188313 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995767.699:17336): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995767.700:17337): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995767.700:17338): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995767.700:17339): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995767.700:17340): pid=188310 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188310 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995771.984:17341): pid=188425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188425 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995771.985:17342): pid=188424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188425 suid=74 rport=42930 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995771.986:17343): pid=188424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188425 suid=74 rport=42930 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995772.056:17344): pid=188424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995772.057:17345): pid=188424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995772.084:17346): pid=188424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995772.085:17347): pid=188424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188425 suid=74 rport=42930 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995772.087:17348): pid=188424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995772.088:17349): pid=188424 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=56 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995772.088:17349): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffff3f5a3a0 a2=1 a3=0 items=0 ppid=37599 pid=188424 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=56 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995772.088:17349): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995772.089:17350): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995772.115:17351): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995772.117:17352): pid=188427 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995772.117:17353): pid=188427 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995772.160:17354): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995772.160:17355): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995772.162:17356): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995772.222:17357): pid=188428 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995772.222:17358): pid=188428 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6D616E696C615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995772.224:17359): pid=188428 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995772.228:17360): pid=188428 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995772.242:17361): pid=188428 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995772.242:17362): pid=188428 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995772.245:17363): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188427 suid=0 rport=42930 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995772.245:17364): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995772.247:17365): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995772.248:17366): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995772.248:17367): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995772.248:17368): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995772.249:17369): pid=188424 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188424 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995773.623:17370): pid=188562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188562 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995773.625:17371): pid=188561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188562 suid=74 rport=42932 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995773.625:17372): pid=188561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=188562 suid=74 rport=42932 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995773.703:17373): pid=188561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995773.703:17374): pid=188561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995773.731:17375): pid=188561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995773.731:17376): pid=188561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188562 suid=74 rport=42932 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995773.733:17377): pid=188561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995773.733:17378): pid=188561 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=57 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995773.733:17378): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe6cf96d00 a2=1 a3=0 items=0 ppid=37599 pid=188561 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=57 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995773.733:17378): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995773.735:17379): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995773.759:17380): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995773.761:17381): pid=188569 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995773.761:17382): pid=188569 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995773.804:17383): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995773.804:17384): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995773.805:17385): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995773.850:17386): pid=188572 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995773.851:17387): pid=188572 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6D616E696C615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995773.851:17388): pid=188572 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995773.854:17389): pid=188572 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995773.861:17390): pid=188572 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995773.862:17391): pid=188572 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995773.865:17392): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=188569 suid=0 rport=42932 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995773.865:17393): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995773.867:17394): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995773.868:17395): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995773.868:17396): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995773.869:17397): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995773.869:17398): pid=188561 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=188561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995775.180:17399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995775.182:17400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995775.604:17401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995775.648:17402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995777.181:17403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995777.345:17404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780995783.939:17405): pid=182624 uid=0 auid=0 ses=26 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1780995783.941:17406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995783.968:17407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995788.181:17408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995788.317:17409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995792.186:17410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995792.188:17411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995792.281:17412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995792.330:17413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995792.442:17414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995792.528:17415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995797.301:17416): pid=189873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=189873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995797.302:17417): pid=189872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=189873 suid=74 rport=51348 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995797.303:17418): pid=189872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=189873 suid=74 rport=51348 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995797.376:17419): pid=189872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995797.376:17420): pid=189872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995797.405:17421): pid=189872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995797.406:17422): pid=189872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189873 suid=74 rport=51348 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995797.408:17423): pid=189872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995797.408:17424): pid=189872 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=58 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995797.408:17424): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffac8d1900 a2=1 a3=0 items=0 ppid=37599 pid=189872 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=58 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995797.408:17424): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995797.410:17425): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995797.469:17426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995797.502:17427): pid=189924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1780995797.502:17428): pid=189924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1780995797.503:17429): pid=189924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995797.503:17430): pid=189924 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=59 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995797.503:17430): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd323a9ea0 a2=1 a3=0 items=0 ppid=1 pid=189924 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=59 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995797.503:17430): proctitle="(systemd)"
type=USER_START msg=audit(1780995797.506:17431): pid=189924 uid=0 auid=0 ses=59 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1780995797.529:17432): prog-id=712 op=LOAD
type=SYSCALL msg=audit(1780995797.529:17432): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdec4a00a0 a2=90 a3=0 items=0 ppid=1 pid=189924 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=59 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995797.529:17432): proctitle="(systemd)"
type=BPF msg=audit(1780995797.530:17433): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995797.530:17434): prog-id=713 op=LOAD
type=SYSCALL msg=audit(1780995797.530:17434): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdec4a0140 a2=90 a3=4 items=0 ppid=1 pid=189924 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=59 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995797.530:17434): proctitle="(systemd)"
type=BPF msg=audit(1780995797.530:17435): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780995797.660:17436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995797.678:17437): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995797.679:17438): pid=189940 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=189940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995797.680:17439): pid=189940 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995797.723:17440): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995797.723:17441): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995797.727:17442): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=189941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995797.766:17443): pid=189941 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995797.766:17444): pid=189941 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6D616E696C615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995797.767:17445): pid=189941 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995797.770:17446): pid=189941 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995797.778:17447): pid=189941 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995797.778:17448): pid=189941 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995797.780:17449): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=189940 suid=0 rport=51348 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995797.781:17450): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=189940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995797.783:17451): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995797.783:17452): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995797.784:17453): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995797.784:17454): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995797.784:17455): pid=189872 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=189872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995801.405:17456): pid=190213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190213 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995801.603:17457): pid=190212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=190213 suid=74 rport=37932 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995801.604:17458): pid=190212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=190213 suid=74 rport=37932 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995802.702:17459): pid=190212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190213 suid=74 rport=37932 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995802.703:17460): pid=190212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190213 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995802.703:17461): pid=190212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995802.704:17462): pid=190212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995802.704:17463): pid=190212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995802.856:17464): pid=190231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995802.856:17465): pid=190230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=190231 suid=74 rport=47742 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995802.857:17466): pid=190230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=190231 suid=74 rport=47742 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995802.932:17467): pid=190230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995802.932:17468): pid=190230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995802.959:17469): pid=190230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995802.960:17470): pid=190230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190231 suid=74 rport=47742 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995802.962:17471): pid=190230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995802.962:17472): pid=190230 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=60 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995802.962:17472): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffa0263360 a2=1 a3=0 items=0 ppid=37599 pid=190230 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=60 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995802.962:17472): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995802.963:17473): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995802.994:17474): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995802.996:17475): pid=190233 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995802.997:17476): pid=190233 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995803.040:17477): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995803.040:17478): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995803.042:17479): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995803.085:17480): pid=190234 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995803.085:17481): pid=190234 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E657574726F6E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995803.087:17482): pid=190234 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995803.092:17483): pid=190234 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995803.103:17484): pid=190234 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995803.104:17485): pid=190234 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995803.105:17486): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190233 suid=0 rport=47742 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995803.105:17487): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995803.107:17488): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995803.108:17489): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995803.108:17490): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995803.108:17491): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995803.108:17492): pid=190230 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995806.186:17493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995806.189:17494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995806.547:17495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995806.627:17496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995807.402:17497): pid=190499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190499 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995807.404:17498): pid=190498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=190499 suid=74 rport=47756 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995807.404:17499): pid=190498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=190499 suid=74 rport=47756 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995807.479:17500): pid=190498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995807.479:17501): pid=190498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995807.508:17502): pid=190498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995807.508:17503): pid=190498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190499 suid=74 rport=47756 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995807.511:17504): pid=190498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995807.511:17505): pid=190498 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=61 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995807.511:17505): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff2954c550 a2=1 a3=0 items=0 ppid=37599 pid=190498 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=61 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995807.511:17505): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995807.512:17506): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995807.526:17507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995807.544:17508): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995807.545:17509): pid=190548 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190548 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995807.546:17510): pid=190548 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995807.590:17511): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995807.591:17512): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995807.593:17513): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190556 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995807.664:17514): pid=190556 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995807.664:17515): pid=190556 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F706C6163656D656E745F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995807.666:17516): pid=190556 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995807.670:17517): pid=190556 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995807.686:17518): pid=190556 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995807.686:17519): pid=190556 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995807.689:17520): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190548 suid=0 rport=47756 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995807.689:17521): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190548 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995807.692:17522): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995807.692:17523): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995807.693:17524): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995807.693:17525): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995807.693:17526): pid=190498 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190498 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995807.734:17527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995809.016:17528): pid=190614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190614 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995809.018:17529): pid=190613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=190614 suid=74 rport=47028 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995809.018:17530): pid=190613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=190614 suid=74 rport=47028 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995809.088:17531): pid=190613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995809.088:17532): pid=190613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995809.105:17533): pid=190613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995809.105:17534): pid=190613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190614 suid=74 rport=47028 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995809.107:17535): pid=190613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995809.107:17536): pid=190613 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=62 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995809.107:17536): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc6ca8ef90 a2=1 a3=0 items=0 ppid=37599 pid=190613 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995809.107:17536): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995809.109:17537): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995809.139:17538): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995809.140:17539): pid=190641 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995809.141:17540): pid=190641 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995809.184:17541): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995809.184:17542): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995809.186:17543): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995809.250:17544): pid=190670 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995809.250:17545): pid=190670 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995809.251:17546): pid=190670 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995809.254:17547): pid=190670 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995809.265:17548): pid=190670 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995809.266:17549): pid=190670 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995809.269:17550): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190641 suid=0 rport=47028 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995809.270:17551): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995809.273:17552): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995809.273:17553): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995809.274:17554): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995809.274:17555): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995809.274:17556): pid=190613 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190613 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995813.687:17557): pid=190898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190898 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995813.688:17558): pid=190897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=190898 suid=74 rport=47034 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995813.688:17559): pid=190897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=190898 suid=74 rport=47034 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995813.761:17560): pid=190897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995813.761:17561): pid=190897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995813.791:17562): pid=190897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995813.791:17563): pid=190897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190898 suid=74 rport=47034 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995813.793:17564): pid=190897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995813.793:17565): pid=190897 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=63 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995813.793:17565): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff0b79aab0 a2=1 a3=0 items=0 ppid=37599 pid=190897 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=63 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995813.793:17565): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995813.795:17566): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995813.825:17567): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995813.826:17568): pid=190900 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190900 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995813.827:17569): pid=190900 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995813.869:17570): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995813.869:17571): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995813.871:17572): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190901 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995813.934:17573): pid=190901 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995813.934:17574): pid=190901 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995813.936:17575): pid=190901 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995813.939:17576): pid=190901 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995813.953:17577): pid=190901 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995813.953:17578): pid=190901 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995813.956:17579): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=190900 suid=0 rport=47034 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995813.956:17580): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190900 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995813.959:17581): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995813.960:17582): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995813.960:17583): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995813.960:17584): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995813.960:17585): pid=190897 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=190897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995819.187:17586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995819.311:17587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995823.188:17588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995823.191:17589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995823.196:17590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995823.345:17591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995823.380:17592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=70890a18183e251f6932838b23dc18d643c88d180c385ff592b8c4b6f041d469 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995823.465:17593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6a6437befad0cb66084dcc44e718c768f8fb0caf3a832bac4bb2a4967cc56d0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780995824.181:17594): pid=189927 uid=0 auid=0 ses=59 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1780995824.181:17595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995824.207:17596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995835.790:17597): pid=192015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192015 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995835.792:17598): pid=192014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=192015 suid=74 rport=46118 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995835.792:17599): pid=192014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=192015 suid=74 rport=46118 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995835.869:17600): pid=192014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995835.869:17601): pid=192014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995835.900:17602): pid=192014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995835.900:17603): pid=192014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192015 suid=74 rport=46118 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995835.903:17604): pid=192014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995835.903:17605): pid=192014 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=64 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995835.903:17605): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff09342dc0 a2=1 a3=0 items=0 ppid=37599 pid=192014 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995835.903:17605): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995835.905:17606): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995835.955:17607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995835.978:17608): pid=192018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1780995835.978:17609): pid=192018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1780995835.979:17610): pid=192018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995835.980:17611): pid=192018 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=65 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995835.980:17611): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd323a9ea0 a2=1 a3=0 items=0 ppid=1 pid=192018 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995835.980:17611): proctitle="(systemd)"
type=USER_START msg=audit(1780995835.982:17612): pid=192018 uid=0 auid=0 ses=65 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1780995836.007:17613): prog-id=714 op=LOAD
type=SYSCALL msg=audit(1780995836.007:17613): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffee9a3a000 a2=90 a3=0 items=0 ppid=1 pid=192018 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995836.007:17613): proctitle="(systemd)"
type=BPF msg=audit(1780995836.008:17614): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995836.008:17615): prog-id=715 op=LOAD
type=SYSCALL msg=audit(1780995836.008:17615): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffee9a3a0a0 a2=90 a3=4 items=0 ppid=1 pid=192018 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995836.008:17615): proctitle="(systemd)"
type=BPF msg=audit(1780995836.008:17616): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780995836.134:17617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995836.158:17618): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995836.160:17619): pid=192033 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995836.161:17620): pid=192033 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995836.204:17621): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995836.204:17622): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995836.207:17623): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995836.276:17624): pid=192034 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995836.276:17625): pid=192034 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995836.278:17626): pid=192034 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995836.283:17627): pid=192034 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995836.297:17628): pid=192034 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995836.297:17629): pid=192034 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995836.299:17630): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995836.299:17631): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995836.300:17632): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192033 suid=0 rport=46118 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995836.300:17633): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995836.303:17634): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995836.303:17635): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995836.304:17636): pid=192014 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192014 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995836.327:17637): pid=192050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995836.329:17638): pid=192049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=192050 suid=74 rport=46120 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995836.329:17639): pid=192049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=192050 suid=74 rport=46120 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995836.402:17640): pid=192049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995836.402:17641): pid=192049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995836.432:17642): pid=192049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995836.433:17643): pid=192049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192050 suid=74 rport=46120 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995836.435:17644): pid=192049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995836.435:17645): pid=192049 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=66 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995836.435:17645): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff8cd8a660 a2=1 a3=0 items=0 ppid=37599 pid=192049 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=66 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995836.435:17645): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995836.437:17646): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995836.465:17647): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995836.466:17648): pid=192052 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995836.467:17649): pid=192052 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995836.510:17650): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995836.510:17651): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995836.512:17652): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995836.575:17653): pid=192053 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995836.575:17654): pid=192053 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995836.576:17655): pid=192053 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995836.581:17656): pid=192053 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995836.592:17657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995836.737:17658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995836.966:17659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995837.164:17660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995838.183:17661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995838.354:17662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780995840.123:17663): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1780995840.325:17664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995840.330:17665): pid=192053 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995840.331:17666): pid=192053 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995840.335:17667): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192052 suid=0 rport=46120 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995840.336:17668): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995840.339:17669): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995840.339:17670): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995840.340:17671): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995840.340:17672): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995840.340:17673): pid=192049 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995846.233:17674): pid=192718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995846.234:17675): pid=192717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=192718 suid=74 rport=37730 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995846.234:17676): pid=192717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=192718 suid=74 rport=37730 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995846.307:17677): pid=192717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995846.307:17678): pid=192717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995846.329:17679): pid=192717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995846.329:17680): pid=192717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192718 suid=74 rport=37730 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995846.331:17681): pid=192717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995846.332:17682): pid=192717 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=67 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995846.332:17682): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd213bd4c0 a2=1 a3=0 items=0 ppid=37599 pid=192717 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=67 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995846.332:17682): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995846.333:17683): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995846.363:17684): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995846.364:17685): pid=192720 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995846.365:17686): pid=192720 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995846.409:17687): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995846.409:17688): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995846.411:17689): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995846.469:17690): pid=192721 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995846.470:17691): pid=192721 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995846.470:17692): pid=192721 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995846.474:17693): pid=192721 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995846.487:17694): pid=192721 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995846.487:17695): pid=192721 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995846.489:17696): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192720 suid=0 rport=37730 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995846.490:17697): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995846.492:17698): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995846.493:17699): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995846.493:17700): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995846.493:17701): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995846.493:17702): pid=192717 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192717 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995846.508:17703): pid=192737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995846.509:17704): pid=192736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=192737 suid=74 rport=37742 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995846.509:17705): pid=192736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=192737 suid=74 rport=37742 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995846.583:17706): pid=192736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995846.583:17707): pid=192736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995846.611:17708): pid=192736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995846.611:17709): pid=192736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192737 suid=74 rport=37742 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995846.613:17710): pid=192736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995846.614:17711): pid=192736 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=68 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995846.614:17711): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe45cfdaf0 a2=1 a3=0 items=0 ppid=37599 pid=192736 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995846.614:17711): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995846.615:17712): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995846.639:17713): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995846.640:17714): pid=192739 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192739 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995846.641:17715): pid=192739 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995846.684:17716): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995846.684:17717): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995846.686:17718): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995846.744:17719): pid=192740 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995846.745:17720): pid=192740 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995846.746:17721): pid=192740 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995846.750:17722): pid=192740 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995849.437:17723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995849.564:17724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1780995849.980:17725): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1780995850.184:17726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995850.188:17727): pid=192740 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995850.189:17728): pid=192740 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995850.193:17729): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=192739 suid=0 rport=37742 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995850.194:17730): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192739 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995850.198:17731): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995850.198:17732): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995850.199:17733): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995850.199:17734): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995850.199:17735): pid=192736 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=192736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995854.179:17736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995854.296:17737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780995860.434:17738): pid=192020 uid=0 auid=0 ses=65 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1780995860.434:17739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995860.463:17740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995866.127:17741): pid=193861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=193861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995866.129:17742): pid=193860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=193861 suid=74 rport=36892 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995866.129:17743): pid=193860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=193861 suid=74 rport=36892 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995866.202:17744): pid=193860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995866.202:17745): pid=193860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995866.231:17746): pid=193860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995866.231:17747): pid=193860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193861 suid=74 rport=36892 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995866.233:17748): pid=193860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995866.234:17749): pid=193860 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=69 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995866.234:17749): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe37225b60 a2=1 a3=0 items=0 ppid=37599 pid=193860 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=69 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995866.234:17749): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995866.235:17750): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995866.279:17751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995866.317:17752): pid=193864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1780995866.317:17753): pid=193864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1780995866.318:17754): pid=193864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995866.318:17755): pid=193864 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=70 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995866.318:17755): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd323a9ea0 a2=1 a3=0 items=0 ppid=1 pid=193864 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=70 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995866.318:17755): proctitle="(systemd)"
type=USER_START msg=audit(1780995866.321:17756): pid=193864 uid=0 auid=0 ses=70 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1780995866.341:17757): prog-id=716 op=LOAD
type=SYSCALL msg=audit(1780995866.341:17757): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd832d2860 a2=90 a3=0 items=0 ppid=1 pid=193864 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=70 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995866.341:17757): proctitle="(systemd)"
type=BPF msg=audit(1780995866.342:17758): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780995866.342:17759): prog-id=717 op=LOAD
type=SYSCALL msg=audit(1780995866.342:17759): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd832d2900 a2=90 a3=4 items=0 ppid=1 pid=193864 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=70 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995866.342:17759): proctitle="(systemd)"
type=BPF msg=audit(1780995866.342:17760): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780995866.458:17761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995866.480:17762): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995866.481:17763): pid=193887 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=193887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995866.482:17764): pid=193887 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995866.525:17765): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995866.525:17766): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995866.525:17767): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=193888 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995866.582:17768): pid=193888 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995866.582:17769): pid=193888 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995866.583:17770): pid=193888 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995866.587:17771): pid=193888 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995866.600:17772): pid=193888 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995866.600:17773): pid=193888 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995866.604:17774): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=193887 suid=0 rport=36892 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995866.604:17775): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=193887 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995866.607:17776): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995866.608:17777): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995866.608:17778): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995866.608:17779): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995866.609:17780): pid=193860 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=193860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995867.182:17781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995867.186:17782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995867.486:17783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995867.726:17784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f2f8bfdf773f01b21ba8ee4159f20bf5d23945c8c6c3c6affecc25cd98cbf1d9 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995868.154:17785): pid=194172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995868.366:17786): pid=194182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194182 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995868.367:17787): pid=194176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194182 suid=74 rport=53972 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995868.367:17788): pid=194176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194182 suid=74 rport=53972 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995868.435:17789): pid=194171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194172 suid=74 rport=45590 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995868.435:17790): pid=194171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194172 suid=74 rport=45590 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995868.441:17791): pid=194176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995868.441:17792): pid=194176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995868.470:17793): pid=194176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995868.471:17794): pid=194176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194182 suid=74 rport=53972 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995868.473:17795): pid=194176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995868.473:17796): pid=194176 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=71 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995868.473:17796): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe26ad1b00 a2=1 a3=0 items=0 ppid=37599 pid=194176 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995868.473:17796): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995868.474:17797): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995868.502:17798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995868.517:17799): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995868.519:17800): pid=194190 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995868.520:17801): pid=194190 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995868.563:17802): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995868.563:17803): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995868.566:17804): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995868.629:17805): pid=194198 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995868.629:17806): pid=194198 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995868.630:17807): pid=194198 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995868.634:17808): pid=194198 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995868.648:17809): pid=194198 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995868.648:17810): pid=194198 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995868.651:17811): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194190 suid=0 rport=53972 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995868.652:17812): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995868.653:17813): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995868.653:17814): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995868.654:17815): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995868.654:17816): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995868.654:17817): pid=194176 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995868.668:17818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995868.674:17819): pid=194241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995868.675:17820): pid=194239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194241 suid=74 rport=53986 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995868.675:17821): pid=194239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194241 suid=74 rport=53986 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995868.755:17822): pid=194239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995868.755:17823): pid=194239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995868.785:17824): pid=194239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995868.785:17825): pid=194239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194241 suid=74 rport=53986 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995868.787:17826): pid=194239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995868.787:17827): pid=194239 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=72 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995868.787:17827): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff067923b0 a2=1 a3=0 items=0 ppid=37599 pid=194239 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=72 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995868.787:17827): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995868.788:17828): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995868.815:17829): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995868.816:17830): pid=194243 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995868.816:17831): pid=194243 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995868.859:17832): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995868.859:17833): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995868.860:17834): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194244 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995868.916:17835): pid=194244 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995868.917:17836): pid=194244 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995868.917:17837): pid=194244 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995868.921:17838): pid=194244 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1780995869.306:17839): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1780995869.464:17840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_vnc_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995869.468:17841): pid=194244 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995869.469:17842): pid=194244 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995869.472:17843): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194243 suid=0 rport=53986 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995869.473:17844): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995869.475:17845): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995869.475:17846): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995869.476:17847): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995869.476:17848): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995869.476:17849): pid=194239 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995869.957:17850): pid=194171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194172 suid=74 rport=45590 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995869.957:17851): pid=194171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194172 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995869.957:17852): pid=194171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995869.958:17853): pid=194171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995869.958:17854): pid=194171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995870.916:17855): pid=194370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995870.917:17856): pid=194369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194370 suid=74 rport=54002 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995870.918:17857): pid=194369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194370 suid=74 rport=54002 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995870.990:17858): pid=194369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995870.990:17859): pid=194369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995871.019:17860): pid=194369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995871.019:17861): pid=194369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194370 suid=74 rport=54002 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995871.021:17862): pid=194369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995871.021:17863): pid=194369 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=73 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995871.021:17863): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc2c29fa20 a2=1 a3=0 items=0 ppid=37599 pid=194369 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=73 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995871.021:17863): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995871.023:17864): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995871.049:17865): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995871.051:17866): pid=194374 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995871.051:17867): pid=194374 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995871.094:17868): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995871.094:17869): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995871.096:17870): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995871.158:17871): pid=194375 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995871.158:17872): pid=194375 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995871.159:17873): pid=194375 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995871.163:17874): pid=194375 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995871.176:17875): pid=194375 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995871.176:17876): pid=194375 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995871.178:17877): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194374 suid=0 rport=54002 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995871.179:17878): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995871.182:17879): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995871.182:17880): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995871.183:17881): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995871.183:17882): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995871.183:17883): pid=194369 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995871.813:17884): pid=194399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995871.814:17885): pid=194398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194399 suid=74 rport=54014 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995871.815:17886): pid=194398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194399 suid=74 rport=54014 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995871.889:17887): pid=194398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995871.889:17888): pid=194398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995871.916:17889): pid=194398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995871.917:17890): pid=194398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194399 suid=74 rport=54014 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995871.918:17891): pid=194398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995871.919:17892): pid=194398 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=74 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995871.919:17892): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeafc40080 a2=1 a3=0 items=0 ppid=37599 pid=194398 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=74 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995871.919:17892): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995871.920:17893): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995871.945:17894): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995871.946:17895): pid=194401 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995871.947:17896): pid=194401 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995871.990:17897): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995871.990:17898): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995871.991:17899): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995872.050:17900): pid=194402 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995872.051:17901): pid=194402 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995872.051:17902): pid=194402 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995872.055:17903): pid=194402 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995872.066:17904): pid=194402 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995872.067:17905): pid=194402 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995872.069:17906): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194401 suid=0 rport=54014 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995872.069:17907): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995872.071:17908): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995872.072:17909): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995872.072:17910): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995872.073:17911): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995872.073:17912): pid=194398 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995872.681:17913): pid=194426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995872.683:17914): pid=194425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194426 suid=74 rport=54028 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995872.683:17915): pid=194425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194426 suid=74 rport=54028 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995872.764:17916): pid=194425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995872.764:17917): pid=194425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995872.793:17918): pid=194425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995872.793:17919): pid=194425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194426 suid=74 rport=54028 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995872.795:17920): pid=194425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995872.796:17921): pid=194425 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=75 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995872.796:17921): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc7ba75240 a2=1 a3=0 items=0 ppid=37599 pid=194425 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=75 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995872.796:17921): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995872.797:17922): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995872.831:17923): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995872.832:17924): pid=194428 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995872.833:17925): pid=194428 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995872.876:17926): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995872.876:17927): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995872.877:17928): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194429 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995872.933:17929): pid=194429 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995872.933:17930): pid=194429 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6576616C7561746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995872.934:17931): pid=194429 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995872.936:17932): pid=194429 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995872.948:17933): pid=194429 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995872.948:17934): pid=194429 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995872.950:17935): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194428 suid=0 rport=54028 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995872.951:17936): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995872.953:17937): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995872.953:17938): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995872.954:17939): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995872.954:17940): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995872.954:17941): pid=194425 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194425 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995873.586:17942): pid=194453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995873.587:17943): pid=194452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194453 suid=74 rport=54042 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995873.588:17944): pid=194452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194453 suid=74 rport=54042 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995873.663:17945): pid=194452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995873.663:17946): pid=194452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995873.691:17947): pid=194452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995873.691:17948): pid=194452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194453 suid=74 rport=54042 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995873.693:17949): pid=194452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995873.693:17950): pid=194452 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=76 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995873.693:17950): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcbae8c710 a2=1 a3=0 items=0 ppid=37599 pid=194452 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=76 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995873.693:17950): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995873.694:17951): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995873.720:17952): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995873.722:17953): pid=194455 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995873.722:17954): pid=194455 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995873.765:17955): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995873.765:17956): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995873.766:17957): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995873.813:17958): pid=194456 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995873.814:17959): pid=194456 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995873.814:17960): pid=194456 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995873.817:17961): pid=194456 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995873.828:17962): pid=194456 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995873.828:17963): pid=194456 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995873.830:17964): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194455 suid=0 rport=54042 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995873.831:17965): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995873.833:17966): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995873.834:17967): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995873.834:17968): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995873.834:17969): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995873.835:17970): pid=194452 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995874.485:17971): pid=194472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995874.486:17972): pid=194471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194472 suid=74 rport=54056 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995874.486:17973): pid=194471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194472 suid=74 rport=54056 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995874.570:17974): pid=194471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995874.570:17975): pid=194471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995874.598:17976): pid=194471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995874.599:17977): pid=194471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194472 suid=74 rport=54056 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995874.601:17978): pid=194471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995874.602:17979): pid=194471 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=77 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995874.602:17979): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe5bb752b0 a2=1 a3=0 items=0 ppid=37599 pid=194471 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=77 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995874.602:17979): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995874.603:17980): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995874.636:17981): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995874.638:17982): pid=194482 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194482 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995874.639:17983): pid=194482 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995874.681:17984): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995874.681:17985): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995874.682:17986): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194483 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995874.731:17987): pid=194483 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995874.731:17988): pid=194483 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6E6F7469666965722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995874.732:17989): pid=194483 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995874.735:17990): pid=194483 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995874.744:17991): pid=194483 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995874.744:17992): pid=194483 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995874.747:17993): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194482 suid=0 rport=54056 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995874.747:17994): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194482 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995874.749:17995): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995874.749:17996): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995874.750:17997): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995874.750:17998): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995874.750:17999): pid=194471 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995875.390:18000): pid=194499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194499 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995875.390:18001): pid=194498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194499 suid=74 rport=54070 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995875.390:18002): pid=194498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194499 suid=74 rport=54070 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995875.460:18003): pid=194498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995875.460:18004): pid=194498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995875.482:18005): pid=194498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995875.482:18006): pid=194498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194499 suid=74 rport=54070 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995875.484:18007): pid=194498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995875.484:18008): pid=194498 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=78 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995875.484:18008): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc6a40acc0 a2=1 a3=0 items=0 ppid=37599 pid=194498 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=78 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995875.484:18008): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995875.485:18009): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995875.511:18010): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995875.512:18011): pid=194501 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194501 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995875.513:18012): pid=194501 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995875.555:18013): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995875.555:18014): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995875.556:18015): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194509 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995875.610:18016): pid=194509 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995875.610:18017): pid=194509 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995875.611:18018): pid=194509 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995875.612:18019): pid=194509 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995875.624:18020): pid=194509 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995875.624:18021): pid=194509 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995875.626:18022): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194501 suid=0 rport=54070 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995875.626:18023): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194501 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995875.628:18024): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995875.628:18025): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995875.629:18026): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995875.629:18027): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995875.629:18028): pid=194498 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194498 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995876.235:18029): pid=194591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194591 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995876.236:18030): pid=194590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194591 suid=74 rport=54080 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995876.236:18031): pid=194590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194591 suid=74 rport=54080 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995876.308:18032): pid=194590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995876.308:18033): pid=194590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995876.327:18034): pid=194590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995876.327:18035): pid=194590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194591 suid=74 rport=54080 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995876.329:18036): pid=194590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995876.329:18037): pid=194590 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=79 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995876.329:18037): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffaaebb820 a2=1 a3=0 items=0 ppid=37599 pid=194590 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=79 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995876.329:18037): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995876.330:18038): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995876.359:18039): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995876.361:18040): pid=194635 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995876.361:18041): pid=194635 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995876.404:18042): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995876.404:18043): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995876.406:18044): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995876.456:18045): pid=194647 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995876.456:18046): pid=194647 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F636F6D707574652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995876.456:18047): pid=194647 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995876.459:18048): pid=194647 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995876.468:18049): pid=194647 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995876.469:18050): pid=194647 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995876.471:18051): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194635 suid=0 rport=54080 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995876.471:18052): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995876.472:18053): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995876.473:18054): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995876.473:18055): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995876.473:18056): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995876.473:18057): pid=194590 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995877.961:18058): pid=194978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194978 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995877.962:18059): pid=194977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194978 suid=74 rport=54088 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995877.963:18060): pid=194977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=194978 suid=74 rport=54088 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995878.039:18061): pid=194977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995878.039:18062): pid=194977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995878.067:18063): pid=194977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995878.068:18064): pid=194977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194978 suid=74 rport=54088 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995878.070:18065): pid=194977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995878.070:18066): pid=194977 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=80 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995878.070:18066): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc4bc9b70 a2=1 a3=0 items=0 ppid=37599 pid=194977 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995878.070:18066): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995878.072:18067): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995878.097:18068): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995878.099:18069): pid=194981 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995878.100:18070): pid=194981 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995878.142:18071): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995878.142:18072): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995878.145:18073): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995878.208:18074): pid=194982 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995878.208:18075): pid=194982 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F69706D692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995878.210:18076): pid=194982 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995878.214:18077): pid=194982 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995878.229:18078): pid=194982 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995878.230:18079): pid=194982 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995878.232:18080): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=194981 suid=0 rport=54088 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995878.232:18081): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995878.236:18082): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995878.236:18083): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995878.237:18084): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995878.237:18085): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995878.237:18086): pid=194977 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=194977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995879.780:18087): pid=195014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195014 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995879.781:18088): pid=195013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195014 suid=74 rport=55854 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995879.781:18089): pid=195013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195014 suid=74 rport=55854 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995879.855:18090): pid=195013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995879.855:18091): pid=195013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995879.884:18092): pid=195013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995879.884:18093): pid=195013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195014 suid=74 rport=55854 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995879.886:18094): pid=195013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995879.887:18095): pid=195013 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=81 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995879.887:18095): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea2c3aef0 a2=1 a3=0 items=0 ppid=37599 pid=195013 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=81 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995879.887:18095): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995879.888:18096): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995879.902:18097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995879.921:18098): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995879.923:18099): pid=195046 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995879.923:18100): pid=195046 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995879.966:18101): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995879.966:18102): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995879.967:18103): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195081 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995880.029:18104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995880.036:18105): pid=195081 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995880.036:18106): pid=195081 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995880.037:18107): pid=195081 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995880.041:18108): pid=195081 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995880.055:18109): pid=195081 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995880.055:18110): pid=195081 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995880.057:18111): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195046 suid=0 rport=55854 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995880.058:18112): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995880.060:18113): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995880.060:18114): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995880.061:18115): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995880.061:18116): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995880.061:18117): pid=195013 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995881.280:18118): pid=195113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995881.282:18119): pid=195112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195113 suid=74 rport=55866 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995881.282:18120): pid=195112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195113 suid=74 rport=55866 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995881.368:18121): pid=195112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995881.368:18122): pid=195112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995881.397:18123): pid=195112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995881.397:18124): pid=195112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195113 suid=74 rport=55866 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995881.399:18125): pid=195112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995881.399:18126): pid=195112 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=82 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995881.399:18126): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeb6c25690 a2=1 a3=0 items=0 ppid=37599 pid=195112 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=82 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995881.399:18126): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995881.401:18127): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995881.425:18128): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995881.427:18129): pid=195115 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195115 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995881.427:18130): pid=195115 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995881.471:18131): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995881.471:18132): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995881.473:18133): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195116 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995881.533:18134): pid=195116 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995881.533:18135): pid=195116 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995881.535:18136): pid=195116 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995881.538:18137): pid=195116 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995881.550:18138): pid=195116 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995881.550:18139): pid=195116 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995881.553:18140): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195115 suid=0 rport=55866 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995881.553:18141): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195115 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995881.555:18142): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995881.556:18143): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995881.556:18144): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995881.556:18145): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995881.556:18146): pid=195112 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995882.200:18147): pid=195192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195192 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995882.201:18148): pid=195188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195192 suid=74 rport=55868 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995882.201:18149): pid=195188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195192 suid=74 rport=55868 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995882.277:18150): pid=195188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995882.277:18151): pid=195188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995882.307:18152): pid=195188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995882.307:18153): pid=195188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195192 suid=74 rport=55868 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995882.310:18154): pid=195188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995882.310:18155): pid=195188 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=83 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995882.310:18155): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd77a747c0 a2=1 a3=0 items=0 ppid=37599 pid=195188 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=83 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995882.310:18155): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995882.311:18156): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995882.341:18157): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995882.343:18158): pid=195224 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995882.344:18159): pid=195224 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995882.386:18160): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995882.386:18161): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995882.387:18162): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995882.452:18163): pid=195225 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995882.452:18164): pid=195225 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F6E657574726F6E5F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995882.453:18165): pid=195225 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995882.458:18166): pid=195225 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995882.472:18167): pid=195225 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995882.472:18168): pid=195225 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995882.474:18169): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195224 suid=0 rport=55868 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995882.475:18170): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995882.477:18171): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995882.477:18172): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995882.478:18173): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995882.478:18174): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995882.478:18175): pid=195188 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995883.040:18176): pid=195268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195268 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995883.041:18177): pid=195267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195268 suid=74 rport=55878 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995883.042:18178): pid=195267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195268 suid=74 rport=55878 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995883.115:18179): pid=195267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995883.115:18180): pid=195267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995883.145:18181): pid=195267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995883.145:18182): pid=195267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195268 suid=74 rport=55878 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995883.148:18183): pid=195267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995883.148:18184): pid=195267 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=84 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995883.148:18184): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd1f23aa50 a2=1 a3=0 items=0 ppid=37599 pid=195267 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=84 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995883.148:18184): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995883.149:18185): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995883.184:18186): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995883.186:18187): pid=195270 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995883.187:18188): pid=195270 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995883.230:18189): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995883.230:18190): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995883.232:18191): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195271 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995883.293:18192): pid=195271 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995883.293:18193): pid=195271 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995883.294:18194): pid=195271 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995883.297:18195): pid=195271 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995883.310:18196): pid=195271 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995883.310:18197): pid=195271 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995883.313:18198): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195270 suid=0 rport=55878 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995883.313:18199): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995883.315:18200): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995883.315:18201): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995883.316:18202): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995883.316:18203): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995883.316:18204): pid=195267 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195267 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995883.947:18205): pid=195295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995883.948:18206): pid=195294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195295 suid=74 rport=55890 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995883.949:18207): pid=195294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195295 suid=74 rport=55890 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995884.027:18208): pid=195294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995884.027:18209): pid=195294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995884.055:18210): pid=195294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995884.055:18211): pid=195294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195295 suid=74 rport=55890 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995884.057:18212): pid=195294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995884.058:18213): pid=195294 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=85 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995884.058:18213): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd675a9880 a2=1 a3=0 items=0 ppid=37599 pid=195294 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=85 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995884.058:18213): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995884.059:18214): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995884.088:18215): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995884.090:18216): pid=195297 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995884.091:18217): pid=195297 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995884.133:18218): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995884.133:18219): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995884.135:18220): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995884.192:18221): pid=195298 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995884.192:18222): pid=195298 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F696E73706563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995884.194:18223): pid=195298 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995884.197:18224): pid=195298 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995884.211:18225): pid=195298 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995884.212:18226): pid=195298 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995884.214:18227): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195297 suid=0 rport=55890 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995884.215:18228): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995884.217:18229): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995884.218:18230): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995884.218:18231): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995884.218:18232): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995884.219:18233): pid=195294 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995884.847:18234): pid=195317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195317 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995884.848:18235): pid=195313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195317 suid=74 rport=55898 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995884.848:18236): pid=195313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195317 suid=74 rport=55898 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995884.924:18237): pid=195313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995884.924:18238): pid=195313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995884.952:18239): pid=195313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995884.953:18240): pid=195313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195317 suid=74 rport=55898 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995884.955:18241): pid=195313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995884.955:18242): pid=195313 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=86 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995884.955:18242): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff121166b0 a2=1 a3=0 items=0 ppid=37599 pid=195313 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=86 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995884.955:18242): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995884.956:18243): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995884.971:18244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995884.987:18245): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995884.988:18246): pid=195330 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995884.989:18247): pid=195330 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995885.032:18248): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995885.032:18249): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995885.034:18250): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995885.096:18251): pid=195336 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995885.096:18252): pid=195336 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995885.098:18253): pid=195336 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995885.102:18254): pid=195336 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1780995885.103:18255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1780995885.115:18256): pid=195336 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995885.116:18257): pid=195336 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995885.118:18258): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195330 suid=0 rport=55898 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995885.119:18259): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995885.122:18260): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995885.122:18261): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995885.123:18262): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995885.123:18263): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995885.123:18264): pid=195313 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195313 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995885.726:18265): pid=195358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995885.727:18266): pid=195357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195358 suid=74 rport=55904 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995885.728:18267): pid=195357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195358 suid=74 rport=55904 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995885.799:18268): pid=195357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995885.799:18269): pid=195357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995885.827:18270): pid=195357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995885.827:18271): pid=195357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195358 suid=74 rport=55904 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995885.830:18272): pid=195357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995885.830:18273): pid=195357 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=87 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995885.830:18273): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcfe1c0b40 a2=1 a3=0 items=0 ppid=37599 pid=195357 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=87 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995885.830:18273): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995885.831:18274): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995885.859:18275): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995885.861:18276): pid=195360 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995885.862:18277): pid=195360 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995885.904:18278): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995885.904:18279): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995885.906:18280): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995885.968:18281): pid=195369 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995885.968:18282): pid=195369 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F696E73706563746F725F646E736D6173712E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995885.970:18283): pid=195369 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995885.972:18284): pid=195369 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995885.987:18285): pid=195369 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995885.987:18286): pid=195369 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995885.990:18287): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195360 suid=0 rport=55904 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995885.990:18288): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995885.993:18289): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995885.993:18290): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995885.994:18291): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995885.994:18292): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995885.994:18293): pid=195357 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995886.598:18294): pid=195385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995886.600:18295): pid=195384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195385 suid=74 rport=55912 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995886.600:18296): pid=195384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195385 suid=74 rport=55912 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995886.687:18297): pid=195384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995886.687:18298): pid=195384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995886.715:18299): pid=195384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995886.716:18300): pid=195384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195385 suid=74 rport=55912 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995886.718:18301): pid=195384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995886.718:18302): pid=195384 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=88 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995886.718:18302): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc191d2d00 a2=1 a3=0 items=0 ppid=37599 pid=195384 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=88 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995886.718:18302): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995886.720:18303): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995886.750:18304): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995886.752:18305): pid=195387 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995886.753:18306): pid=195387 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995886.797:18307): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995886.797:18308): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995886.800:18309): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195388 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995886.861:18310): pid=195388 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995886.862:18311): pid=195388 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F7078655F687474702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995886.863:18312): pid=195388 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995886.866:18313): pid=195388 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995886.883:18314): pid=195388 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995886.883:18315): pid=195388 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995886.886:18316): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195387 suid=0 rport=55912 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995886.886:18317): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995886.889:18318): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995886.889:18319): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995886.890:18320): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995886.890:18321): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995886.890:18322): pid=195384 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995887.498:18323): pid=195412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995887.499:18324): pid=195411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195412 suid=74 rport=55928 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995887.500:18325): pid=195411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195412 suid=74 rport=55928 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995887.572:18326): pid=195411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995887.572:18327): pid=195411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995887.600:18328): pid=195411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995887.600:18329): pid=195411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195412 suid=74 rport=55928 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995887.603:18330): pid=195411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995887.603:18331): pid=195411 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=89 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995887.603:18331): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffecb672530 a2=1 a3=0 items=0 ppid=37599 pid=195411 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=89 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995887.603:18331): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995887.605:18332): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995887.629:18333): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995887.631:18334): pid=195414 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995887.631:18335): pid=195414 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995887.674:18336): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995887.674:18337): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995887.676:18338): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195415 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780995887.724:18339): pid=195415 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780995887.725:18340): pid=195415 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F7078655F746674702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780995887.725:18341): pid=195415 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995887.727:18342): pid=195415 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995887.738:18343): pid=195415 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995887.738:18344): pid=195415 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995887.740:18345): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195414 suid=0 rport=55928 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995887.740:18346): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995887.742:18347): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995887.743:18348): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995887.743:18349): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995887.743:18350): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995887.743:18351): pid=195411 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995888.325:18352): pid=195644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995888.326:18353): pid=195643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195644 suid=74 rport=42630 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995888.327:18354): pid=195643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195644 suid=74 rport=42630 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995888.402:18355): pid=195643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995888.402:18356): pid=195643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995888.432:18357): pid=195643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995888.433:18358): pid=195643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195644 suid=74 rport=42630 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995888.435:18359): pid=195643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995888.435:18360): pid=195643 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=90 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995888.435:18360): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdba8c7ad0 a2=1 a3=0 items=0 ppid=37599 pid=195643 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=90 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995888.435:18360): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995888.438:18361): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995888.480:18362): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995888.482:18363): pid=195695 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995888.482:18364): pid=195695 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995888.525:18365): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995888.525:18366): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995888.526:18367): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195696 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995888.568:18368): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195695 suid=0 rport=42630 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995888.570:18369): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995888.572:18370): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995888.573:18371): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995888.574:18372): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995888.575:18373): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995888.575:18374): pid=195643 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995889.111:18375): pid=195725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995889.112:18376): pid=195722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195725 suid=74 rport=42646 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995889.112:18377): pid=195722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195725 suid=74 rport=42646 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995889.185:18378): pid=195722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995889.185:18379): pid=195722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995889.213:18380): pid=195722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995889.213:18381): pid=195722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195725 suid=74 rport=42646 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995889.215:18382): pid=195722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995889.215:18383): pid=195722 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=91 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995889.215:18383): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdcdc2c600 a2=1 a3=0 items=0 ppid=37599 pid=195722 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=91 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995889.215:18383): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995889.217:18384): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995889.245:18385): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995889.247:18386): pid=195736 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995889.248:18387): pid=195736 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995889.290:18388): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995889.290:18389): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995889.292:18390): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195742 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995889.337:18391): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195736 suid=0 rport=42646 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995889.338:18392): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995889.340:18393): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995889.340:18394): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995889.341:18395): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995889.341:18396): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995889.341:18397): pid=195722 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995889.866:18398): pid=195800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995889.868:18399): pid=195797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195800 suid=74 rport=42654 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995889.868:18400): pid=195797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195800 suid=74 rport=42654 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995889.942:18401): pid=195797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995889.942:18402): pid=195797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995889.970:18403): pid=195797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995889.971:18404): pid=195797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195800 suid=74 rport=42654 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995889.973:18405): pid=195797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995889.973:18406): pid=195797 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=92 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995889.973:18406): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd1d993da0 a2=1 a3=0 items=0 ppid=37599 pid=195797 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=92 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995889.973:18406): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995889.974:18407): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995890.002:18408): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995890.003:18409): pid=195829 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995890.004:18410): pid=195829 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995890.046:18411): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995890.046:18412): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995890.047:18413): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195891 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995890.091:18414): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995890.091:18415): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995890.091:18416): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195829 suid=0 rport=42654 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995890.091:18417): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995890.093:18418): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995890.094:18419): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995890.094:18420): pid=195797 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195797 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995890.639:18421): pid=195934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195934 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995890.640:18422): pid=195931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195934 suid=74 rport=42660 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995890.640:18423): pid=195931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195934 suid=74 rport=42660 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995890.713:18424): pid=195931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995890.713:18425): pid=195931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995890.739:18426): pid=195931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995890.740:18427): pid=195931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195934 suid=74 rport=42660 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995890.742:18428): pid=195931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995890.742:18429): pid=195931 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=93 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995890.742:18429): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff89660420 a2=1 a3=0 items=0 ppid=37599 pid=195931 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=93 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995890.742:18429): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995890.744:18430): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995890.772:18431): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995890.773:18432): pid=195941 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995890.774:18433): pid=195941 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995890.816:18434): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995890.816:18435): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995890.818:18436): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995890.858:18437): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995890.858:18438): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995890.858:18439): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195941 suid=0 rport=42660 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995890.858:18440): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995890.861:18441): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995890.861:18442): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995890.862:18443): pid=195931 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995891.389:18444): pid=195968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995891.390:18445): pid=195967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195968 suid=74 rport=42664 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995891.390:18446): pid=195967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195968 suid=74 rport=42664 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995891.466:18447): pid=195967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995891.466:18448): pid=195967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995891.494:18449): pid=195967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995891.494:18450): pid=195967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195968 suid=74 rport=42664 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995891.496:18451): pid=195967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995891.496:18452): pid=195967 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=94 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995891.496:18452): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffee8839350 a2=1 a3=0 items=0 ppid=37599 pid=195967 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=94 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995891.496:18452): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995891.498:18453): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995891.524:18454): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995891.525:18455): pid=195970 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195970 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995891.526:18456): pid=195970 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995891.569:18457): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995891.569:18458): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995891.571:18459): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995891.612:18460): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195970 suid=0 rport=42664 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995891.613:18461): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195970 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995891.615:18462): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995891.615:18463): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995891.616:18464): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995891.616:18465): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995891.616:18466): pid=195967 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995892.154:18467): pid=195993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995892.155:18468): pid=195992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195993 suid=74 rport=42674 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995892.155:18469): pid=195992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=195993 suid=74 rport=42674 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995892.227:18470): pid=195992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995892.227:18471): pid=195992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995892.254:18472): pid=195992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995892.254:18473): pid=195992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195993 suid=74 rport=42674 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995892.256:18474): pid=195992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995892.257:18475): pid=195992 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=95 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995892.257:18475): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc23aa8fb0 a2=1 a3=0 items=0 ppid=37599 pid=195992 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=95 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995892.257:18475): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995892.258:18476): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995892.285:18477): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995892.286:18478): pid=195995 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995892.287:18479): pid=195995 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995892.329:18480): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995892.329:18481): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995892.331:18482): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995892.372:18483): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=195995 suid=0 rport=42674 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995892.372:18484): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995892.374:18485): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995892.375:18486): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995892.375:18487): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995892.375:18488): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995892.375:18489): pid=195992 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=195992 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995892.900:18490): pid=196010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196010 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995892.901:18491): pid=196009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196010 suid=74 rport=42682 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995892.901:18492): pid=196009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196010 suid=74 rport=42682 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995892.973:18493): pid=196009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995892.973:18494): pid=196009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995892.993:18495): pid=196009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995892.993:18496): pid=196009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196010 suid=74 rport=42682 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995892.995:18497): pid=196009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995892.995:18498): pid=196009 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=96 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995892.995:18498): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff7f669810 a2=1 a3=0 items=0 ppid=37599 pid=196009 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=96 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995892.995:18498): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995892.997:18499): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995893.020:18500): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995893.022:18501): pid=196012 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995893.022:18502): pid=196012 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995893.065:18503): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995893.065:18504): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995893.067:18505): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995893.102:18506): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995893.102:18507): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995893.102:18508): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196012 suid=0 rport=42682 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995893.103:18509): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995893.105:18510): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995893.105:18511): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995893.105:18512): pid=196009 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995893.570:18513): pid=196035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196035 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995893.571:18514): pid=196034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196035 suid=74 rport=42692 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995893.571:18515): pid=196034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196035 suid=74 rport=42692 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995893.644:18516): pid=196034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995893.644:18517): pid=196034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995893.674:18518): pid=196034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995893.674:18519): pid=196034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196035 suid=74 rport=42692 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995893.677:18520): pid=196034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995893.677:18521): pid=196034 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=97 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995893.677:18521): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe62a254a0 a2=1 a3=0 items=0 ppid=37599 pid=196034 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=97 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995893.677:18521): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995893.679:18522): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995893.704:18523): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995893.706:18524): pid=196037 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196037 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995893.707:18525): pid=196037 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995893.749:18526): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995893.749:18527): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995893.751:18528): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995893.791:18529): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196037 suid=0 rport=42692 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995893.791:18530): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196037 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995893.793:18531): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995893.793:18532): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995893.794:18533): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995893.794:18534): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995893.794:18535): pid=196034 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995894.353:18536): pid=196060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995894.354:18537): pid=196059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196060 suid=74 rport=42702 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995894.354:18538): pid=196059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196060 suid=74 rport=42702 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995894.441:18539): pid=196059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995894.441:18540): pid=196059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995894.470:18541): pid=196059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995894.470:18542): pid=196059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196060 suid=74 rport=42702 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995894.472:18543): pid=196059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995894.473:18544): pid=196059 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=98 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995894.473:18544): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc96cf7bb0 a2=1 a3=0 items=0 ppid=37599 pid=196059 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=98 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995894.473:18544): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995894.474:18545): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995894.507:18546): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995894.508:18547): pid=196062 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995894.509:18548): pid=196062 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995894.551:18549): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995894.551:18550): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995894.552:18551): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196063 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995894.589:18552): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196062 suid=0 rport=42702 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995894.589:18553): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995894.591:18554): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995894.592:18555): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995894.592:18556): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995894.592:18557): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995894.592:18558): pid=196059 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995895.141:18559): pid=196077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995895.142:18560): pid=196076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196077 suid=74 rport=42710 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995895.142:18561): pid=196076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196077 suid=74 rport=42710 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995895.221:18562): pid=196076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995895.221:18563): pid=196076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995895.237:18564): pid=196076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995895.238:18565): pid=196076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196077 suid=74 rport=42710 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995895.240:18566): pid=196076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995895.240:18567): pid=196076 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=99 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995895.240:18567): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd519f2c50 a2=1 a3=0 items=0 ppid=37599 pid=196076 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=99 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995895.240:18567): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995895.241:18568): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995895.273:18569): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995895.274:18570): pid=196087 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995895.275:18571): pid=196087 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995895.317:18572): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995895.317:18573): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995895.318:18574): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995895.356:18575): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196087 suid=0 rport=42710 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995895.356:18576): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995895.358:18577): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995895.358:18578): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995895.359:18579): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995895.359:18580): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995895.359:18581): pid=196076 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995895.857:18582): pid=196102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995895.858:18583): pid=196101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196102 suid=74 rport=42716 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995895.858:18584): pid=196101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196102 suid=74 rport=42716 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995895.930:18585): pid=196101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995895.930:18586): pid=196101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995895.963:18587): pid=196101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995895.963:18588): pid=196101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196102 suid=74 rport=42716 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995895.965:18589): pid=196101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995895.966:18590): pid=196101 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=100 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995895.966:18590): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe1249bdf0 a2=1 a3=0 items=0 ppid=37599 pid=196101 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=100 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995895.966:18590): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995895.967:18591): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995895.994:18592): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995895.996:18593): pid=196104 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995895.996:18594): pid=196104 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995896.039:18595): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995896.039:18596): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995896.040:18597): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995896.078:18598): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196104 suid=0 rport=42716 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995896.078:18599): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995896.080:18600): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995896.081:18601): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995896.081:18602): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995896.081:18603): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995896.081:18604): pid=196101 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995896.611:18605): pid=196127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995896.612:18606): pid=196126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196127 suid=74 rport=42726 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995896.612:18607): pid=196126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196127 suid=74 rport=42726 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995896.691:18608): pid=196126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995896.691:18609): pid=196126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995896.718:18610): pid=196126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995896.719:18611): pid=196126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196127 suid=74 rport=42726 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995896.721:18612): pid=196126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995896.721:18613): pid=196126 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=101 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995896.721:18613): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe7be3fb60 a2=1 a3=0 items=0 ppid=37599 pid=196126 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=101 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995896.721:18613): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995896.723:18614): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995896.748:18615): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995896.749:18616): pid=196129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995896.750:18617): pid=196129 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995896.793:18618): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995896.793:18619): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995896.794:18620): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995896.831:18621): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196129 suid=0 rport=42726 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995896.831:18622): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995896.834:18623): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995896.834:18624): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995896.835:18625): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995896.835:18626): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995896.835:18627): pid=196126 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995897.407:18628): pid=196152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995897.409:18629): pid=196151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196152 suid=74 rport=42740 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995897.409:18630): pid=196151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196152 suid=74 rport=42740 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995897.486:18631): pid=196151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995897.486:18632): pid=196151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995897.515:18633): pid=196151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995897.516:18634): pid=196151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196152 suid=74 rport=42740 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995897.518:18635): pid=196151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995897.518:18636): pid=196151 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=102 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995897.518:18636): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea4888310 a2=1 a3=0 items=0 ppid=37599 pid=196151 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=102 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995897.518:18636): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995897.520:18637): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995897.527:18638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995897.546:18639): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995897.548:18640): pid=196160 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995897.549:18641): pid=196160 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995897.593:18642): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995897.593:18643): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995897.595:18644): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995897.644:18645): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196160 suid=0 rport=42740 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995897.645:18646): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995897.647:18647): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995897.648:18648): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995897.648:18649): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995897.648:18650): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995897.648:18651): pid=196151 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196151 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995897.819:18652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995898.171:18653): pid=196403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196403 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995898.172:18654): pid=196402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196403 suid=74 rport=42744 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995898.172:18655): pid=196402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196403 suid=74 rport=42744 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995898.245:18656): pid=196402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995898.245:18657): pid=196402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995898.275:18658): pid=196402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995898.275:18659): pid=196402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196403 suid=74 rport=42744 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995898.278:18660): pid=196402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995898.278:18661): pid=196402 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=103 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995898.278:18661): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd3b151db0 a2=1 a3=0 items=0 ppid=37599 pid=196402 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=103 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995898.278:18661): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995898.279:18662): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995898.309:18663): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995898.310:18664): pid=196413 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995898.311:18665): pid=196413 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995898.354:18666): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995898.354:18667): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995898.356:18668): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196414 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995898.405:18669): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196413 suid=0 rport=42744 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995898.406:18670): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995898.409:18671): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995898.410:18672): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995898.410:18673): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995898.410:18674): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995898.410:18675): pid=196402 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196402 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995898.938:18676): pid=196428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196428 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995898.939:18677): pid=196427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196428 suid=74 rport=58414 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995898.939:18678): pid=196427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196428 suid=74 rport=58414 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995899.014:18679): pid=196427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995899.015:18680): pid=196427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995899.043:18681): pid=196427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995899.043:18682): pid=196427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196428 suid=74 rport=58414 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995899.045:18683): pid=196427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995899.045:18684): pid=196427 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=104 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995899.045:18684): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea1c32850 a2=1 a3=0 items=0 ppid=37599 pid=196427 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=104 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995899.045:18684): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995899.047:18685): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995899.067:18686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995899.083:18687): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995899.085:18688): pid=196436 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995899.086:18689): pid=196436 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995899.129:18690): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995899.129:18691): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995899.130:18692): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196442 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995899.179:18693): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196436 suid=0 rport=58414 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995899.180:18694): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995899.182:18695): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995899.183:18696): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995899.183:18697): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995899.184:18698): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995899.184:18699): pid=196427 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995899.252:18700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995899.714:18701): pid=196492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196492 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995899.716:18702): pid=196491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196492 suid=74 rport=58424 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995899.716:18703): pid=196491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196492 suid=74 rport=58424 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995899.788:18704): pid=196491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995899.788:18705): pid=196491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995899.816:18706): pid=196491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995899.816:18707): pid=196491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196492 suid=74 rport=58424 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995899.818:18708): pid=196491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995899.819:18709): pid=196491 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=105 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995899.819:18709): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd444dbba0 a2=1 a3=0 items=0 ppid=37599 pid=196491 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=105 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995899.819:18709): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995899.820:18710): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995899.847:18711): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995899.849:18712): pid=196494 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995899.849:18713): pid=196494 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995899.892:18714): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995899.892:18715): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995899.893:18716): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995899.931:18717): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196494 suid=0 rport=58424 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995899.931:18718): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995899.933:18719): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995899.933:18720): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995899.934:18721): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995899.934:18722): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995899.934:18723): pid=196491 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196491 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995900.467:18724): pid=196570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196570 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995900.468:18725): pid=196569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196570 suid=74 rport=58428 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995900.468:18726): pid=196569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196570 suid=74 rport=58428 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995900.542:18727): pid=196569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995900.542:18728): pid=196569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995900.571:18729): pid=196569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995900.571:18730): pid=196569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196570 suid=74 rport=58428 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995900.574:18731): pid=196569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995900.575:18732): pid=196569 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=106 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995900.575:18732): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcdd6aac70 a2=1 a3=0 items=0 ppid=37599 pid=196569 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=106 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995900.575:18732): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995900.575:18733): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995900.606:18734): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995900.607:18735): pid=196572 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995900.608:18736): pid=196572 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995900.652:18737): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995900.652:18738): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995900.653:18739): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995900.698:18740): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196572 suid=0 rport=58428 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995900.698:18741): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196572 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995900.700:18742): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995900.701:18743): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995900.702:18744): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995900.702:18745): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995900.702:18746): pid=196569 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995901.246:18747): pid=196589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995901.247:18748): pid=196588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196589 suid=74 rport=58430 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995901.247:18749): pid=196588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196589 suid=74 rport=58430 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995901.331:18750): pid=196588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995901.331:18751): pid=196588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995901.360:18752): pid=196588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995901.360:18753): pid=196588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196589 suid=74 rport=58430 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995901.363:18754): pid=196588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995901.363:18755): pid=196588 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=107 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995901.363:18755): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffca263d780 a2=1 a3=0 items=0 ppid=37599 pid=196588 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=107 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995901.363:18755): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995901.365:18756): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995901.387:18757): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995901.389:18758): pid=196600 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995901.390:18759): pid=196600 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995901.432:18760): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995901.432:18761): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995901.435:18762): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196617 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995901.480:18763): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196600 suid=0 rport=58430 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995901.481:18764): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995901.484:18765): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995901.484:18766): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995901.485:18767): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995901.485:18768): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995901.485:18769): pid=196588 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.017:18770): pid=196668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196668 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995902.018:18771): pid=196666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196668 suid=74 rport=58444 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995902.018:18772): pid=196666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196668 suid=74 rport=58444 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995902.094:18773): pid=196666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995902.094:18774): pid=196666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995902.122:18775): pid=196666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995902.123:18776): pid=196666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196668 suid=74 rport=58444 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995902.125:18777): pid=196666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995902.125:18778): pid=196666 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=108 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995902.125:18778): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff2f00b6b0 a2=1 a3=0 items=0 ppid=37599 pid=196666 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=108 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995902.125:18778): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995902.127:18779): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995902.156:18780): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.157:18781): pid=196681 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995902.158:18782): pid=196681 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995902.201:18783): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995902.201:18784): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.202:18785): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.244:18786): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196681 suid=0 rport=58444 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.245:18787): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995902.247:18788): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995902.248:18789): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995902.248:18790): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995902.248:18791): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.248:18792): pid=196666 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196666 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.726:18793): pid=196749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196749 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995902.728:18794): pid=196748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196749 suid=74 rport=58458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995902.728:18795): pid=196748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196749 suid=74 rport=58458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995902.801:18796): pid=196748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995902.801:18797): pid=196748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995902.830:18798): pid=196748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995902.830:18799): pid=196748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196749 suid=74 rport=58458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995902.832:18800): pid=196748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995902.832:18801): pid=196748 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=109 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995902.832:18801): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcfcc7c1f0 a2=1 a3=0 items=0 ppid=37599 pid=196748 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=109 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995902.832:18801): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995902.834:18802): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995902.874:18803): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.875:18804): pid=196767 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995902.876:18805): pid=196767 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995902.918:18806): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995902.918:18807): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.920:18808): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.959:18809): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196767 suid=0 rport=58458 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.960:18810): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995902.962:18811): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995902.962:18812): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995902.963:18813): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995902.963:18814): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995902.963:18815): pid=196748 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196748 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995903.461:18816): pid=196834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995903.462:18817): pid=196830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196834 suid=74 rport=58472 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995903.463:18818): pid=196830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196834 suid=74 rport=58472 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995903.545:18819): pid=196830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995903.545:18820): pid=196830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995903.573:18821): pid=196830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995903.573:18822): pid=196830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196834 suid=74 rport=58472 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995903.576:18823): pid=196830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995903.576:18824): pid=196830 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=110 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995903.576:18824): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffa3d7f380 a2=1 a3=0 items=0 ppid=37599 pid=196830 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=110 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995903.576:18824): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995903.577:18825): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995903.613:18826): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995903.614:18827): pid=196842 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995903.615:18828): pid=196842 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995903.658:18829): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995903.658:18830): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995903.658:18831): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995903.699:18832): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196842 suid=0 rport=58472 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995903.699:18833): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995903.701:18834): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995903.702:18835): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995903.703:18836): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995903.703:18837): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995903.703:18838): pid=196830 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995904.238:18839): pid=196858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196858 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995904.239:18840): pid=196857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196858 suid=74 rport=58484 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995904.239:18841): pid=196857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196858 suid=74 rport=58484 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995904.312:18842): pid=196857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995904.312:18843): pid=196857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995904.340:18844): pid=196857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995904.340:18845): pid=196857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196858 suid=74 rport=58484 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995904.342:18846): pid=196857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995904.342:18847): pid=196857 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=111 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995904.342:18847): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcc6fb8210 a2=1 a3=0 items=0 ppid=37599 pid=196857 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=111 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995904.342:18847): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995904.344:18848): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995904.375:18849): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995904.377:18850): pid=196860 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995904.378:18851): pid=196860 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995904.421:18852): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995904.421:18853): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995904.422:18854): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995904.458:18855): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995904.458:18856): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995904.458:18857): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196860 suid=0 rport=58484 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995904.459:18858): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196860 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995904.461:18859): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995904.462:18860): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995904.462:18861): pid=196857 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196857 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995905.019:18862): pid=196883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995905.020:18863): pid=196882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196883 suid=74 rport=58488 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995905.020:18864): pid=196882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196883 suid=74 rport=58488 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995905.103:18865): pid=196882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995905.103:18866): pid=196882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995905.130:18867): pid=196882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995905.130:18868): pid=196882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196883 suid=74 rport=58488 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995905.133:18869): pid=196882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995905.133:18870): pid=196882 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=112 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995905.133:18870): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff03341ca0 a2=1 a3=0 items=0 ppid=37599 pid=196882 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=112 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995905.133:18870): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995905.134:18871): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995905.160:18872): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995905.162:18873): pid=196885 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995905.163:18874): pid=196885 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995905.205:18875): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995905.205:18876): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995905.206:18877): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196886 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995905.241:18878): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995905.241:18879): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995905.241:18880): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196885 suid=0 rport=58488 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995905.242:18881): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995905.244:18882): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995905.244:18883): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995905.245:18884): pid=196882 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995905.797:18885): pid=196908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995905.798:18886): pid=196907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196908 suid=74 rport=58490 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995905.798:18887): pid=196907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196908 suid=74 rport=58490 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995905.881:18888): pid=196907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995905.882:18889): pid=196907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995905.913:18890): pid=196907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995905.913:18891): pid=196907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196908 suid=74 rport=58490 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995905.916:18892): pid=196907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995905.916:18893): pid=196907 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=113 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995905.916:18893): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff7f9982b0 a2=1 a3=0 items=0 ppid=37599 pid=196907 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=113 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995905.916:18893): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995905.918:18894): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995905.953:18895): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995905.954:18896): pid=196910 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995905.955:18897): pid=196910 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995905.997:18898): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995905.997:18899): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995905.998:18900): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196911 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995906.037:18901): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196910 suid=0 rport=58490 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995906.038:18902): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995906.040:18903): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995906.040:18904): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995906.041:18905): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995906.041:18906): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995906.041:18907): pid=196907 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196907 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995906.599:18908): pid=196934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196934 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995906.600:18909): pid=196933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196934 suid=74 rport=58500 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995906.601:18910): pid=196933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196934 suid=74 rport=58500 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995906.682:18911): pid=196933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995906.682:18912): pid=196933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995906.710:18913): pid=196933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995906.711:18914): pid=196933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196934 suid=74 rport=58500 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995906.713:18915): pid=196933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995906.714:18916): pid=196933 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=114 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995906.714:18916): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc47536270 a2=1 a3=0 items=0 ppid=37599 pid=196933 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=114 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995906.714:18916): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995906.715:18917): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995906.743:18918): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995906.744:18919): pid=196936 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196936 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995906.745:18920): pid=196936 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995906.788:18921): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995906.788:18922): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995906.790:18923): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995906.827:18924): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196936 suid=0 rport=58500 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995906.827:18925): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196936 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995906.829:18926): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995906.830:18927): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995906.830:18928): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995906.830:18929): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995906.831:18930): pid=196933 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995907.351:18931): pid=196951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995907.353:18932): pid=196950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196951 suid=74 rport=58510 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995907.353:18933): pid=196950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=196951 suid=74 rport=58510 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995907.429:18934): pid=196950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995907.429:18935): pid=196950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995907.457:18936): pid=196950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995907.457:18937): pid=196950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196951 suid=74 rport=58510 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995907.460:18938): pid=196950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995907.460:18939): pid=196950 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=115 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995907.460:18939): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd443fa6b0 a2=1 a3=0 items=0 ppid=37599 pid=196950 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=115 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995907.460:18939): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995907.461:18940): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995907.487:18941): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995907.488:18942): pid=196953 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196953 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995907.489:18943): pid=196953 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995907.531:18944): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995907.531:18945): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995907.532:18946): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995907.569:18947): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=196953 suid=0 rport=58510 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995907.570:18948): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196953 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995907.571:18949): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995907.572:18950): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995907.572:18951): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995907.572:18952): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995907.572:18953): pid=196950 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=196950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995908.107:18954): pid=197169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995908.108:18955): pid=197153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197169 suid=74 rport=58518 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995908.109:18956): pid=197153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197169 suid=74 rport=58518 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995908.186:18957): pid=197153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995908.186:18958): pid=197153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995908.214:18959): pid=197153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995908.214:18960): pid=197153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197169 suid=74 rport=58518 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995908.217:18961): pid=197153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995908.218:18962): pid=197153 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=116 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995908.218:18962): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff04b423b0 a2=1 a3=0 items=0 ppid=37599 pid=197153 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=116 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995908.218:18962): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995908.219:18963): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995908.252:18964): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995908.254:18965): pid=197183 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995908.255:18966): pid=197183 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995908.298:18967): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995908.298:18968): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995908.300:18969): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995908.340:18970): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197183 suid=0 rport=58518 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995908.341:18971): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197183 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995908.343:18972): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995908.343:18973): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995908.343:18974): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995908.343:18975): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995908.344:18976): pid=197153 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995908.837:18977): pid=197206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995908.838:18978): pid=197205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197206 suid=74 rport=52214 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995908.838:18979): pid=197205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197206 suid=74 rport=52214 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995908.921:18980): pid=197205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995908.921:18981): pid=197205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995908.949:18982): pid=197205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995908.949:18983): pid=197205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197206 suid=74 rport=52214 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995908.951:18984): pid=197205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995908.952:18985): pid=197205 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=117 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995908.952:18985): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe81ba9320 a2=1 a3=0 items=0 ppid=37599 pid=197205 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=117 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995908.952:18985): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995908.953:18986): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995908.978:18987): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995908.979:18988): pid=197208 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995908.980:18989): pid=197208 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995909.022:18990): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995909.022:18991): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995909.024:18992): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197209 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995909.065:18993): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197208 suid=0 rport=52214 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995909.065:18994): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995909.067:18995): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995909.067:18996): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995909.068:18997): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995909.068:18998): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995909.068:18999): pid=197205 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197205 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995909.653:19000): pid=197231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995909.654:19001): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197231 suid=74 rport=52218 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995909.654:19002): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197231 suid=74 rport=52218 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995909.728:19003): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995909.728:19004): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995909.749:19005): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995909.749:19006): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197231 suid=74 rport=52218 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995909.751:19007): pid=197230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995909.751:19008): pid=197230 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=118 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995909.751:19008): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff59104110 a2=1 a3=0 items=0 ppid=37599 pid=197230 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=118 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995909.751:19008): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995909.752:19009): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995909.778:19010): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995909.779:19011): pid=197233 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995909.780:19012): pid=197233 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995909.823:19013): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995909.823:19014): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995909.825:19015): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995909.865:19016): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197233 suid=0 rport=52218 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995909.865:19017): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995909.868:19018): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995909.868:19019): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995909.869:19020): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995909.869:19021): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995909.869:19022): pid=197230 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995910.182:19023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995910.327:19024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995910.405:19025): pid=197318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995910.406:19026): pid=197317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197318 suid=74 rport=52232 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995910.407:19027): pid=197317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197318 suid=74 rport=52232 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995910.480:19028): pid=197317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995910.480:19029): pid=197317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995910.508:19030): pid=197317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995910.508:19031): pid=197317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197318 suid=74 rport=52232 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995910.512:19032): pid=197317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995910.512:19033): pid=197317 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=119 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995910.512:19033): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffef1489470 a2=1 a3=0 items=0 ppid=37599 pid=197317 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=119 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995910.512:19033): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995910.514:19034): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995910.540:19035): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995910.541:19036): pid=197320 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995910.542:19037): pid=197320 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995910.586:19038): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995910.586:19039): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995910.588:19040): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995910.629:19041): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197320 suid=0 rport=52232 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995910.630:19042): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995910.632:19043): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995910.632:19044): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995910.632:19045): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995910.632:19046): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995910.633:19047): pid=197317 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197317 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995911.231:19048): pid=197345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197345 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995911.232:19049): pid=197344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197345 suid=74 rport=52244 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995911.232:19050): pid=197344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197345 suid=74 rport=52244 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995911.309:19051): pid=197344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995911.309:19052): pid=197344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995911.336:19053): pid=197344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995911.337:19054): pid=197344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197345 suid=74 rport=52244 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995911.339:19055): pid=197344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995911.339:19056): pid=197344 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=120 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995911.339:19056): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc53910c00 a2=1 a3=0 items=0 ppid=37599 pid=197344 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=120 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995911.339:19056): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995911.341:19057): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995911.367:19058): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995911.369:19059): pid=197347 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995911.370:19060): pid=197347 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995911.413:19061): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995911.413:19062): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995911.415:19063): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995911.460:19064): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197347 suid=0 rport=52244 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995911.461:19065): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995911.464:19066): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995911.464:19067): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995911.465:19068): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995911.465:19069): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995911.465:19070): pid=197344 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995912.007:19071): pid=197370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995912.008:19072): pid=197369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197370 suid=74 rport=52252 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995912.008:19073): pid=197369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197370 suid=74 rport=52252 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995912.081:19074): pid=197369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995912.081:19075): pid=197369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995912.108:19076): pid=197369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995912.108:19077): pid=197369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197370 suid=74 rport=52252 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995912.110:19078): pid=197369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995912.110:19079): pid=197369 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=121 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995912.110:19079): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffca2bc8e50 a2=1 a3=0 items=0 ppid=37599 pid=197369 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=121 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995912.110:19079): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995912.112:19080): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995912.137:19081): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995912.138:19082): pid=197372 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995912.139:19083): pid=197372 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995912.181:19084): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995912.181:19085): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995912.203:19086): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995912.242:19087): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197372 suid=0 rport=52252 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995912.243:19088): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995912.245:19089): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995912.245:19090): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995912.246:19091): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995912.246:19092): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995912.246:19093): pid=197369 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995912.781:19094): pid=197395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197395 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995912.782:19095): pid=197394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197395 suid=74 rport=52254 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995912.782:19096): pid=197394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197395 suid=74 rport=52254 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995912.852:19097): pid=197394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995912.852:19098): pid=197394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995912.883:19099): pid=197394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995912.883:19100): pid=197394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197395 suid=74 rport=52254 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995912.885:19101): pid=197394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995912.886:19102): pid=197394 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=122 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995912.886:19102): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff99c4aaa0 a2=1 a3=0 items=0 ppid=37599 pid=197394 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=122 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995912.886:19102): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995912.887:19103): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995912.914:19104): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995912.915:19105): pid=197397 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995912.916:19106): pid=197397 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995912.959:19107): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995912.959:19108): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995912.961:19109): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995913.004:19110): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995913.004:19111): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995913.004:19112): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197397 suid=0 rport=52254 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995913.005:19113): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995913.007:19114): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995913.007:19115): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995913.008:19116): pid=197394 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995913.578:19117): pid=197412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995913.579:19118): pid=197411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197412 suid=74 rport=52270 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995913.579:19119): pid=197411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197412 suid=74 rport=52270 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995913.652:19120): pid=197411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995913.652:19121): pid=197411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995913.680:19122): pid=197411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995913.681:19123): pid=197411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197412 suid=74 rport=52270 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995913.683:19124): pid=197411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995913.683:19125): pid=197411 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=123 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995913.683:19125): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb5d36960 a2=1 a3=0 items=0 ppid=37599 pid=197411 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=123 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995913.683:19125): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995913.684:19126): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995913.709:19127): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995913.710:19128): pid=197418 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995913.711:19129): pid=197418 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995913.753:19130): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995913.753:19131): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995913.754:19132): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197423 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995913.791:19133): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197418 suid=0 rport=52270 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995913.792:19134): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995913.794:19135): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995913.794:19136): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995913.794:19137): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995913.794:19138): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995913.795:19139): pid=197411 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995914.271:19140): pid=197458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995914.272:19141): pid=197457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197458 suid=74 rport=52284 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995914.272:19142): pid=197457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197458 suid=74 rport=52284 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995914.346:19143): pid=197457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995914.346:19144): pid=197457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995914.376:19145): pid=197457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995914.376:19146): pid=197457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197458 suid=74 rport=52284 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995914.378:19147): pid=197457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995914.378:19148): pid=197457 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=124 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995914.378:19148): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffedcb4190 a2=1 a3=0 items=0 ppid=37599 pid=197457 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=124 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995914.378:19148): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995914.379:19149): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995914.411:19150): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995914.412:19151): pid=197488 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995914.413:19152): pid=197488 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995914.455:19153): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995914.455:19154): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995914.456:19155): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197489 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995914.497:19156): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197488 suid=0 rport=52284 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995914.497:19157): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995914.499:19158): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995914.500:19159): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995914.501:19160): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995914.501:19161): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995914.501:19162): pid=197457 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197457 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995915.025:19163): pid=197518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197518 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995915.026:19164): pid=197515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197518 suid=74 rport=52296 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995915.027:19165): pid=197515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197518 suid=74 rport=52296 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995915.104:19166): pid=197515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995915.104:19167): pid=197515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995915.131:19168): pid=197515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995915.132:19169): pid=197515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197518 suid=74 rport=52296 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995915.134:19170): pid=197515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995915.134:19171): pid=197515 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=125 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995915.134:19171): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd2756a8b0 a2=1 a3=0 items=0 ppid=37599 pid=197515 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=125 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995915.134:19171): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995915.136:19172): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995915.150:19173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995915.171:19174): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995915.173:19175): pid=197535 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995915.173:19176): pid=197535 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995915.216:19177): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995915.216:19178): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995915.218:19179): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197547 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995915.266:19180): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197535 suid=0 rport=52296 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995915.266:19181): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995915.271:19182): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995915.272:19183): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995915.272:19184): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995915.272:19185): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995915.273:19186): pid=197515 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995915.280:19187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995915.817:19188): pid=197616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995915.819:19189): pid=197615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197616 suid=74 rport=52312 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995915.820:19190): pid=197615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197616 suid=74 rport=52312 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995915.901:19191): pid=197615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995915.901:19192): pid=197615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995915.929:19193): pid=197615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995915.930:19194): pid=197615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197616 suid=74 rport=52312 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995915.933:19195): pid=197615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995915.934:19196): pid=197615 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=126 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995915.934:19196): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf978d780 a2=1 a3=0 items=0 ppid=37599 pid=197615 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=126 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995915.934:19196): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995915.936:19197): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995915.964:19198): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995915.966:19199): pid=197625 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995915.966:19200): pid=197625 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995916.009:19201): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995916.009:19202): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995916.012:19203): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995916.056:19204): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197625 suid=0 rport=52312 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995916.056:19205): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197625 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995916.059:19206): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995916.060:19207): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995916.061:19208): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995916.061:19209): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995916.061:19210): pid=197615 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995916.603:19211): pid=197689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995916.605:19212): pid=197688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197689 suid=74 rport=52318 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995916.605:19213): pid=197688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197689 suid=74 rport=52318 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995916.682:19214): pid=197688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995916.682:19215): pid=197688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995916.711:19216): pid=197688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995916.711:19217): pid=197688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197689 suid=74 rport=52318 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995916.714:19218): pid=197688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995916.714:19219): pid=197688 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=127 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995916.714:19219): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdf230d080 a2=1 a3=0 items=0 ppid=37599 pid=197688 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=127 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995916.714:19219): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995916.716:19220): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995916.749:19221): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995916.751:19222): pid=197700 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995916.752:19223): pid=197700 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995916.794:19224): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995916.794:19225): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995916.798:19226): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197708 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995916.843:19227): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995916.844:19228): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995916.844:19229): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197700 suid=0 rport=52318 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995916.844:19230): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995916.847:19231): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995916.847:19232): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995916.848:19233): pid=197688 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197688 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995917.380:19234): pid=197725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995917.381:19235): pid=197724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197725 suid=74 rport=52328 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995917.381:19236): pid=197724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197725 suid=74 rport=52328 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995917.454:19237): pid=197724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995917.454:19238): pid=197724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995917.485:19239): pid=197724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995917.486:19240): pid=197724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197725 suid=74 rport=52328 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995917.490:19241): pid=197724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995917.490:19242): pid=197724 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=128 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995917.490:19242): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd07bc1a80 a2=1 a3=0 items=0 ppid=37599 pid=197724 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=128 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995917.490:19242): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995917.492:19243): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995917.522:19244): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995917.523:19245): pid=197727 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995917.524:19246): pid=197727 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995917.567:19247): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995917.567:19248): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995917.569:19249): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995917.613:19250): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197727 suid=0 rport=52328 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995917.614:19251): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995917.617:19252): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995917.617:19253): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995917.618:19254): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995917.618:19255): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995917.618:19256): pid=197724 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995918.170:19257): pid=197946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995918.172:19258): pid=197930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197946 suid=74 rport=52330 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995918.172:19259): pid=197930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197946 suid=74 rport=52330 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995918.258:19260): pid=197930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995918.258:19261): pid=197930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995918.287:19262): pid=197930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995918.288:19263): pid=197930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197946 suid=74 rport=52330 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995918.290:19264): pid=197930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995918.290:19265): pid=197930 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=129 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995918.290:19265): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd728bac80 a2=1 a3=0 items=0 ppid=37599 pid=197930 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=129 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995918.290:19265): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995918.291:19266): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995918.321:19267): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995918.323:19268): pid=197957 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995918.324:19269): pid=197957 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995918.366:19270): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995918.366:19271): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995918.368:19272): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197958 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995918.407:19273): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197957 suid=0 rport=52330 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995918.409:19274): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995918.411:19275): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995918.412:19276): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995918.412:19277): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995918.412:19278): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995918.412:19279): pid=197930 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197930 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995918.962:19280): pid=197980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995918.963:19281): pid=197979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197980 suid=74 rport=40312 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995918.964:19282): pid=197979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197980 suid=74 rport=40312 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995919.041:19283): pid=197979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995919.042:19284): pid=197979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995919.070:19285): pid=197979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995919.070:19286): pid=197979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197980 suid=74 rport=40312 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995919.073:19287): pid=197979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995919.073:19288): pid=197979 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=130 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995919.073:19288): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffebb2d7470 a2=1 a3=0 items=0 ppid=37599 pid=197979 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=130 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995919.073:19288): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995919.075:19289): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995919.102:19290): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995919.104:19291): pid=197982 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995919.105:19292): pid=197982 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995919.148:19293): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995919.148:19294): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995919.150:19295): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995919.188:19296): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197982 suid=0 rport=40312 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995919.188:19297): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995919.191:19298): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995919.192:19299): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995919.192:19300): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995919.192:19301): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995919.193:19302): pid=197979 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197979 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995919.722:19303): pid=197997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995919.723:19304): pid=197996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197997 suid=74 rport=40320 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995919.723:19305): pid=197996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=197997 suid=74 rport=40320 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995919.799:19306): pid=197996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995919.799:19307): pid=197996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995919.827:19308): pid=197996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995919.828:19309): pid=197996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=197997 suid=74 rport=40320 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995919.830:19310): pid=197996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995919.830:19311): pid=197996 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=131 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995919.830:19311): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd2ab5b7b0 a2=1 a3=0 items=0 ppid=37599 pid=197996 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=131 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995919.830:19311): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995919.831:19312): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995919.864:19313): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995919.865:19314): pid=198006 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995919.866:19315): pid=198006 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995919.909:19316): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995919.909:19317): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995919.911:19318): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995919.946:19319): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198006 suid=0 rport=40320 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995919.946:19320): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995919.948:19321): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995919.949:19322): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995919.950:19323): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995919.950:19324): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995919.950:19325): pid=197996 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=197996 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995920.475:19326): pid=198075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995920.475:19327): pid=198074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198075 suid=74 rport=40332 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995920.476:19328): pid=198074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198075 suid=74 rport=40332 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995920.554:19329): pid=198074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995920.554:19330): pid=198074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995920.585:19331): pid=198074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995920.585:19332): pid=198074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198075 suid=74 rport=40332 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995920.588:19333): pid=198074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995920.588:19334): pid=198074 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=132 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995920.588:19334): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc5de75460 a2=1 a3=0 items=0 ppid=37599 pid=198074 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=132 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995920.588:19334): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995920.589:19335): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995920.620:19336): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995920.621:19337): pid=198077 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995920.622:19338): pid=198077 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995920.665:19339): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995920.665:19340): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995920.667:19341): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995920.714:19342): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198077 suid=0 rport=40332 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995920.715:19343): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995920.717:19344): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995920.718:19345): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995920.719:19346): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995920.719:19347): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995920.719:19348): pid=198074 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198074 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995921.259:19349): pid=198102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995921.260:19350): pid=198101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198102 suid=74 rport=40336 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995921.260:19351): pid=198101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198102 suid=74 rport=40336 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995921.333:19352): pid=198101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995921.333:19353): pid=198101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995921.355:19354): pid=198101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995921.355:19355): pid=198101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198102 suid=74 rport=40336 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995921.357:19356): pid=198101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995921.358:19357): pid=198101 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=133 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995921.358:19357): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcffa0bf30 a2=1 a3=0 items=0 ppid=37599 pid=198101 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=133 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995921.358:19357): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995921.359:19358): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995921.389:19359): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995921.390:19360): pid=198104 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995921.391:19361): pid=198104 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995921.433:19362): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995921.433:19363): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995921.435:19364): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995921.478:19365): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198104 suid=0 rport=40336 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995921.479:19366): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995921.481:19367): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995921.481:19368): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995921.482:19369): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995921.482:19370): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995921.482:19371): pid=198101 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995921.986:19372): pid=198127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995921.988:19373): pid=198126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198127 suid=74 rport=40348 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995921.989:19374): pid=198126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198127 suid=74 rport=40348 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995922.068:19375): pid=198126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995922.068:19376): pid=198126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995922.099:19377): pid=198126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995922.099:19378): pid=198126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198127 suid=74 rport=40348 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995922.101:19379): pid=198126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995922.101:19380): pid=198126 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=134 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995922.101:19380): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffebb3eabe0 a2=1 a3=0 items=0 ppid=37599 pid=198126 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=134 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995922.101:19380): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995922.103:19381): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995922.138:19382): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995922.139:19383): pid=198129 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995922.140:19384): pid=198129 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995922.183:19385): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995922.183:19386): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995922.184:19387): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995922.227:19388): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198129 suid=0 rport=40348 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995922.228:19389): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995922.230:19390): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995922.230:19391): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995922.231:19392): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995922.231:19393): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995922.232:19394): pid=198126 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995922.745:19395): pid=198144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198144 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995922.746:19396): pid=198143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198144 suid=74 rport=40356 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995922.746:19397): pid=198143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198144 suid=74 rport=40356 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995922.821:19398): pid=198143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995922.821:19399): pid=198143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995922.849:19400): pid=198143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995922.850:19401): pid=198143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198144 suid=74 rport=40356 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995922.852:19402): pid=198143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995922.852:19403): pid=198143 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=135 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995922.852:19403): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffefc805160 a2=1 a3=0 items=0 ppid=37599 pid=198143 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=135 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995922.852:19403): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995922.854:19404): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995922.883:19405): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995922.885:19406): pid=198146 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198146 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995922.886:19407): pid=198146 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995922.928:19408): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995922.928:19409): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995922.929:19410): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198152 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995922.953:19411): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198146 suid=0 rport=40356 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995922.953:19412): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198146 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995922.955:19413): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995922.955:19414): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995922.955:19415): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995922.955:19416): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995922.955:19417): pid=198143 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995923.456:19418): pid=198169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995923.457:19419): pid=198168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198169 suid=74 rport=40364 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995923.457:19420): pid=198168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198169 suid=74 rport=40364 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995923.531:19421): pid=198168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995923.531:19422): pid=198168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995923.552:19423): pid=198168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995923.552:19424): pid=198168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198169 suid=74 rport=40364 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995923.554:19425): pid=198168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995923.554:19426): pid=198168 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=136 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995923.554:19426): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd0b54c9a0 a2=1 a3=0 items=0 ppid=37599 pid=198168 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=136 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995923.554:19426): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995923.555:19427): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995923.582:19428): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995923.583:19429): pid=198171 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995923.584:19430): pid=198171 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995923.626:19431): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995923.626:19432): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995923.628:19433): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995923.661:19434): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198171 suid=0 rport=40364 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995923.661:19435): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198171 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995923.663:19436): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995923.664:19437): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995923.664:19438): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995923.664:19439): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995923.665:19440): pid=198168 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995924.195:19441): pid=198194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198194 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995924.197:19442): pid=198193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198194 suid=74 rport=40374 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995924.197:19443): pid=198193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198194 suid=74 rport=40374 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995924.275:19444): pid=198193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995924.275:19445): pid=198193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995924.302:19446): pid=198193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995924.302:19447): pid=198193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198194 suid=74 rport=40374 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995924.304:19448): pid=198193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995924.305:19449): pid=198193 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=137 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995924.305:19449): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc334c58d0 a2=1 a3=0 items=0 ppid=37599 pid=198193 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=137 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995924.305:19449): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995924.306:19450): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995924.333:19451): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995924.334:19452): pid=198196 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995924.335:19453): pid=198196 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995924.377:19454): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995924.377:19455): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995924.379:19456): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198197 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995924.419:19457): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198196 suid=0 rport=40374 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995924.419:19458): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995924.421:19459): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995924.422:19460): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995924.423:19461): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995924.423:19462): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995924.423:19463): pid=198193 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198193 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995924.947:19464): pid=198211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995924.948:19465): pid=198210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198211 suid=74 rport=40390 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995924.948:19466): pid=198210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198211 suid=74 rport=40390 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995925.032:19467): pid=198210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995925.032:19468): pid=198210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995925.060:19469): pid=198210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995925.061:19470): pid=198210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198211 suid=74 rport=40390 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995925.063:19471): pid=198210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995925.063:19472): pid=198210 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=138 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995925.063:19472): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffca6b4d6f0 a2=1 a3=0 items=0 ppid=37599 pid=198210 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=138 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995925.063:19472): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995925.064:19473): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995925.087:19474): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995925.088:19475): pid=198221 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198221 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995925.089:19476): pid=198221 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995925.131:19477): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995925.131:19478): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995925.132:19479): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995925.169:19480): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995925.169:19481): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995925.170:19482): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198221 suid=0 rport=40390 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995925.170:19483): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198221 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995925.173:19484): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995925.173:19485): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995925.174:19486): pid=198210 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198210 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995925.729:19487): pid=198236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995925.730:19488): pid=198235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198236 suid=74 rport=40394 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995925.730:19489): pid=198235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198236 suid=74 rport=40394 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995925.805:19490): pid=198235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995925.805:19491): pid=198235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995925.825:19492): pid=198235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995925.825:19493): pid=198235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198236 suid=74 rport=40394 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995925.827:19494): pid=198235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995925.827:19495): pid=198235 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=139 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995925.827:19495): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe33f031c0 a2=1 a3=0 items=0 ppid=37599 pid=198235 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=139 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995925.827:19495): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995925.828:19496): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995925.848:19497): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995925.849:19498): pid=198238 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995925.850:19499): pid=198238 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995925.892:19500): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995925.892:19501): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995925.893:19502): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995925.923:19503): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198238 suid=0 rport=40394 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995925.923:19504): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198238 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995925.971:19505): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995925.971:19506): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995925.972:19507): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995925.972:19508): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995925.972:19509): pid=198235 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995926.384:19510): pid=198261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198261 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995926.502:19511): pid=198263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995926.503:19512): pid=198262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198263 suid=74 rport=40406 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995926.503:19513): pid=198262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198263 suid=74 rport=40406 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995926.585:19514): pid=198260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198261 suid=74 rport=57322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995926.585:19515): pid=198260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198261 suid=74 rport=57322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995926.589:19516): pid=198262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995926.589:19517): pid=198262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995926.606:19518): pid=198262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995926.606:19519): pid=198262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198263 suid=74 rport=40406 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995926.608:19520): pid=198262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995926.608:19521): pid=198262 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=140 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995926.608:19521): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe15cb2210 a2=1 a3=0 items=0 ppid=37599 pid=198262 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=140 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995926.608:19521): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995926.609:19522): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995926.637:19523): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995926.638:19524): pid=198265 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995926.639:19525): pid=198265 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995926.681:19526): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995926.681:19527): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995926.683:19528): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198266 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995926.720:19529): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198265 suid=0 rport=40406 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995926.720:19530): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198265 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995926.722:19531): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995926.722:19532): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995926.723:19533): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995926.723:19534): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995926.723:19535): pid=198262 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198262 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995927.254:19536): pid=198288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995927.255:19537): pid=198287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198288 suid=74 rport=40420 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995927.255:19538): pid=198287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198288 suid=74 rport=40420 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995927.343:19539): pid=198287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995927.343:19540): pid=198287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995927.371:19541): pid=198287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995927.371:19542): pid=198287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198288 suid=74 rport=40420 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995927.373:19543): pid=198287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995927.374:19544): pid=198287 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=141 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995927.374:19544): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffee5a3b5e0 a2=1 a3=0 items=0 ppid=37599 pid=198287 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=141 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995927.374:19544): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995927.375:19545): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995927.403:19546): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995927.404:19547): pid=198290 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995927.404:19548): pid=198290 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995927.447:19549): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995927.447:19550): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995927.449:19551): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995927.491:19552): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198290 suid=0 rport=40420 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995927.492:19553): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995927.494:19554): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995927.495:19555): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995927.495:19556): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995927.496:19557): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995927.496:19558): pid=198287 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995927.699:19559): pid=198260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198261 suid=74 rport=57322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995927.699:19560): pid=198260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198261 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995927.700:19561): pid=198260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995927.700:19562): pid=198260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198260 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995927.700:19563): pid=198260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995928.026:19564): pid=198359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995928.028:19565): pid=198353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198359 suid=74 rport=40422 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995928.028:19566): pid=198353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198359 suid=74 rport=40422 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995928.116:19567): pid=198353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995928.116:19568): pid=198353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995928.145:19569): pid=198353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995928.146:19570): pid=198353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198359 suid=74 rport=40422 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995928.148:19571): pid=198353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995928.148:19572): pid=198353 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=142 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995928.148:19572): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd57ff28b0 a2=1 a3=0 items=0 ppid=37599 pid=198353 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=142 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995928.148:19572): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995928.149:19573): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995928.160:19574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995928.182:19575): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995928.184:19576): pid=198550 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198550 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995928.185:19577): pid=198550 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995928.227:19578): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995928.227:19579): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995928.228:19580): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995928.274:19581): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198550 suid=0 rport=40422 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995928.275:19582): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198550 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995928.277:19583): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995928.278:19584): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995928.278:19585): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995928.278:19586): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995928.279:19587): pid=198353 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995928.462:19588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995928.833:19589): pid=198674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995928.835:19590): pid=198673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198674 suid=74 rport=58466 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995928.835:19591): pid=198673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198674 suid=74 rport=58466 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995928.907:19592): pid=198673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995928.907:19593): pid=198673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995928.938:19594): pid=198673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995928.939:19595): pid=198673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198674 suid=74 rport=58466 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995928.940:19596): pid=198673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995928.940:19597): pid=198673 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=143 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995928.940:19597): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffebfb5540 a2=1 a3=0 items=0 ppid=37599 pid=198673 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=143 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995928.940:19597): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995928.942:19598): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995928.969:19599): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995928.970:19600): pid=198683 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995928.970:19601): pid=198683 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995929.013:19602): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995929.013:19603): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995929.015:19604): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995929.048:19605): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198683 suid=0 rport=58466 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995929.049:19606): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995929.051:19607): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995929.051:19608): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995929.052:19609): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995929.052:19610): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995929.052:19611): pid=198673 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995929.560:19612): pid=198757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198757 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995929.562:19613): pid=198755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198757 suid=74 rport=58468 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995929.562:19614): pid=198755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198757 suid=74 rport=58468 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995929.635:19615): pid=198755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995929.635:19616): pid=198755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995929.664:19617): pid=198755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995929.664:19618): pid=198755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198757 suid=74 rport=58468 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995929.666:19619): pid=198755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995929.666:19620): pid=198755 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=144 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995929.666:19620): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc637a1110 a2=1 a3=0 items=0 ppid=37599 pid=198755 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=144 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995929.666:19620): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995929.668:19621): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780995929.688:19622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780995929.704:19623): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995929.705:19624): pid=198776 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198776 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995929.705:19625): pid=198776 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995929.747:19626): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995929.747:19627): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995929.748:19628): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995929.790:19629): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198776 suid=0 rport=58468 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995929.790:19630): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198776 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995929.792:19631): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995929.793:19632): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995929.793:19633): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995929.793:19634): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995929.793:19635): pid=198755 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780995929.856:19636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995930.312:19637): pid=198831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995930.313:19638): pid=198830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198831 suid=74 rport=58470 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995930.313:19639): pid=198830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198831 suid=74 rport=58470 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995930.388:19640): pid=198830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995930.388:19641): pid=198830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995930.416:19642): pid=198830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995930.418:19643): pid=198830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198831 suid=74 rport=58470 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995930.421:19644): pid=198830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995930.421:19645): pid=198830 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=145 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995930.421:19645): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd3d849d20 a2=1 a3=0 items=0 ppid=37599 pid=198830 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=145 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995930.421:19645): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995930.422:19646): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995930.456:19647): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995930.458:19648): pid=198845 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995930.458:19649): pid=198845 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995930.501:19650): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995930.501:19651): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995930.502:19652): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995930.546:19653): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198845 suid=0 rport=58470 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995930.546:19654): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995930.549:19655): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995930.549:19656): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995930.550:19657): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995930.550:19658): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995930.550:19659): pid=198830 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995931.046:19660): pid=198903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995931.047:19661): pid=198902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198903 suid=74 rport=58486 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995931.047:19662): pid=198902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198903 suid=74 rport=58486 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995931.126:19663): pid=198902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995931.126:19664): pid=198902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995931.156:19665): pid=198902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995931.157:19666): pid=198902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198903 suid=74 rport=58486 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995931.159:19667): pid=198902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995931.160:19668): pid=198902 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=146 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995931.160:19668): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc41e2fc50 a2=1 a3=0 items=0 ppid=37599 pid=198902 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=146 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995931.160:19668): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995931.161:19669): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995931.192:19670): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995931.194:19671): pid=198913 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995931.194:19672): pid=198913 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995931.237:19673): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995931.237:19674): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995931.240:19675): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995931.281:19676): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198913 suid=0 rport=58486 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995931.281:19677): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995931.283:19678): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995931.283:19679): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995931.284:19680): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995931.284:19681): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995931.284:19682): pid=198902 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995931.818:19683): pid=198928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995931.819:19684): pid=198927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198928 suid=74 rport=58494 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995931.819:19685): pid=198927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198928 suid=74 rport=58494 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995931.892:19686): pid=198927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995931.892:19687): pid=198927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995931.913:19688): pid=198927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995931.913:19689): pid=198927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198928 suid=74 rport=58494 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995931.915:19690): pid=198927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995931.915:19691): pid=198927 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=147 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995931.915:19691): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1df2f9f0 a2=1 a3=0 items=0 ppid=37599 pid=198927 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=147 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995931.915:19691): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995931.916:19692): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995931.945:19693): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995931.946:19694): pid=198930 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198930 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995931.946:19695): pid=198930 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995931.988:19696): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995931.988:19697): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995931.989:19698): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995932.029:19699): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198930 suid=0 rport=58494 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995932.029:19700): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198930 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995932.032:19701): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995932.032:19702): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995932.033:19703): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995932.033:19704): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995932.033:19705): pid=198927 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995932.550:19706): pid=198953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198953 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995932.551:19707): pid=198952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198953 suid=74 rport=58504 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995932.551:19708): pid=198952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198953 suid=74 rport=58504 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995932.632:19709): pid=198952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995932.632:19710): pid=198952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995932.661:19711): pid=198952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995932.661:19712): pid=198952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198953 suid=74 rport=58504 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995932.664:19713): pid=198952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995932.664:19714): pid=198952 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=148 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995932.664:19714): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcfed2a840 a2=1 a3=0 items=0 ppid=37599 pid=198952 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=148 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995932.664:19714): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995932.665:19715): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995932.690:19716): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995932.691:19717): pid=198955 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995932.692:19718): pid=198955 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995932.734:19719): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995932.734:19720): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995932.735:19721): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198956 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995932.768:19722): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995932.769:19723): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995932.769:19724): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198955 suid=0 rport=58504 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995932.769:19725): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995932.771:19726): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995932.771:19727): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995932.772:19728): pid=198952 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995933.297:19729): pid=198978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198978 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995933.298:19730): pid=198977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198978 suid=74 rport=58520 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995933.299:19731): pid=198977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198978 suid=74 rport=58520 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995933.378:19732): pid=198977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995933.378:19733): pid=198977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995933.408:19734): pid=198977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995933.408:19735): pid=198977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198978 suid=74 rport=58520 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995933.411:19736): pid=198977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995933.411:19737): pid=198977 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=149 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995933.411:19737): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc70de1210 a2=1 a3=0 items=0 ppid=37599 pid=198977 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=149 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995933.411:19737): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995933.412:19738): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995933.438:19739): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995933.440:19740): pid=198980 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995933.440:19741): pid=198980 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995933.483:19742): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995933.483:19743): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995933.484:19744): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995933.525:19745): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995933.525:19746): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995933.525:19747): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198980 suid=0 rport=58520 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995933.525:19748): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995933.527:19749): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995933.528:19750): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995933.528:19751): pid=198977 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995934.077:19752): pid=198995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198995 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995934.078:19753): pid=198994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198995 suid=74 rport=58532 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995934.078:19754): pid=198994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=198995 suid=74 rport=58532 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995934.157:19755): pid=198994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995934.157:19756): pid=198994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995934.185:19757): pid=198994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995934.185:19758): pid=198994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198995 suid=74 rport=58532 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995934.187:19759): pid=198994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995934.187:19760): pid=198994 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=150 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995934.187:19760): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd59b84bd0 a2=1 a3=0 items=0 ppid=37599 pid=198994 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=150 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995934.187:19760): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995934.189:19761): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995934.215:19762): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995934.217:19763): pid=198997 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995934.218:19764): pid=198997 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995934.261:19765): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995934.261:19766): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995934.262:19767): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=199006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995934.302:19768): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=198997 suid=0 rport=58532 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995934.303:19769): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995934.304:19770): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995934.305:19771): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995934.305:19772): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995934.305:19773): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995934.305:19774): pid=198994 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=198994 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995934.846:19775): pid=199020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=199020 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995934.847:19776): pid=199019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=199020 suid=74 rport=58548 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995934.848:19777): pid=199019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=199020 suid=74 rport=58548 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995934.922:19778): pid=199019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995934.922:19779): pid=199019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995934.950:19780): pid=199019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995934.950:19781): pid=199019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=199020 suid=74 rport=58548 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995934.952:19782): pid=199019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995934.952:19783): pid=199019 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=151 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995934.952:19783): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff0ea1d7a0 a2=1 a3=0 items=0 ppid=37599 pid=199019 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=151 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995934.952:19783): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995934.953:19784): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995934.982:19785): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995934.983:19786): pid=199022 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=199022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995934.984:19787): pid=199022 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995935.027:19788): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995935.027:19789): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995935.028:19790): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=199023 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995935.064:19791): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=199022 suid=0 rport=58548 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995935.065:19792): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=199022 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995935.067:19793): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995935.068:19794): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995935.069:19795): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995935.069:19796): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995935.069:19797): pid=199019 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=199019 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995935.595:19798): pid=199045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=199045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780995935.596:19799): pid=199044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=199045 suid=74 rport=58556 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995935.597:19800): pid=199044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=199045 suid=74 rport=58556 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780995935.671:19801): pid=199044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995935.671:19802): pid=199044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780995935.699:19803): pid=199044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995935.699:19804): pid=199044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=199045 suid=74 rport=58556 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780995935.702:19805): pid=199044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780995935.702:19806): pid=199044 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=152 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780995935.702:19806): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc6314efb0 a2=1 a3=0 items=0 ppid=37599 pid=199044 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=152 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780995935.702:19806): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780995935.703:19807): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780995935.735:19808): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995935.736:19809): pid=199047 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=199047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780995935.737:19810): pid=199047 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780995935.779:19811): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780995935.779:19812): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995935.780:19813): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=199048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995935.818:19814): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=199047 suid=0 rport=58556 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780995935.819:19815): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=199047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780995935.820:19816): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780995935.821:19817): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780995935.821:19818): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780995935.822:19819): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780995935.822:19820): pid=199044 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=199044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780995941.187:19821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995941.357:19822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995945.935:19823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780995945.945:19824): pid=193874 uid=0 auid=0 ses=70 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1780995945.946:19825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995945.966:19826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995946.045:19827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995959.181:19828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995959.508:19829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995960.181:19830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995960.333:19831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995972.183:19832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995972.291:19833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995976.181:19834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995976.329:19835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995989.946:19836): pid=201979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=201979 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780995989.960:19837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780995990.233:19838): pid=201978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=201979 suid=74 rport=57950 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780995990.233:19839): pid=201978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=201979 suid=74 rport=57950 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780995990.257:19840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780995991.185:19841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780995991.362:19842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995991.762:19843): pid=201978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=201979 suid=74 rport=57950 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780995991.762:19844): pid=201978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=201979 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780995991.763:19845): pid=201978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780995991.764:19846): pid=201978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=201978 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780995991.764:19847): pid=201978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996002.341:19848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996002.458:19849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996007.183:19850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996007.295:19851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996021.181:19852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996021.485:19853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996021.487:19854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996021.667:19855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996029.378:19856): pid=204173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=204173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996029.486:19857): pid=204172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=204173 suid=74 rport=41476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996029.486:19858): pid=204172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=204173 suid=74 rport=41476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996030.132:19859): pid=204172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=204173 suid=74 rport=41476 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996030.132:19860): pid=204172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=204173 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996030.133:19861): pid=204172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.147 addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996030.134:19862): pid=204172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=204172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996030.134:19863): pid=204172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996033.191:19864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996033.325:19865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996038.186:19866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996038.280:19867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996052.183:19868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996052.186:19869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996052.432:19870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996052.501:19871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996052.705:19872): pid=205395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=205395 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996052.908:19873): pid=205394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=205395 suid=74 rport=56552 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996052.908:19874): pid=205394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=205395 suid=74 rport=56552 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996054.032:19875): pid=205394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=205395 suid=74 rport=56552 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996054.033:19876): pid=205394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=205395 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996054.033:19877): pid=205394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.108.100.117 addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996054.034:19878): pid=205394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=205394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996054.034:19879): pid=205394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=222.108.100.117 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996062.768:19880): pid=206013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996062.769:19881): pid=206009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206013 suid=74 rport=39566 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996062.769:19882): pid=206009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206013 suid=74 rport=39566 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780996062.846:19883): pid=206009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996062.846:19884): pid=206009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780996062.875:19885): pid=206009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996062.875:19886): pid=206009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206013 suid=74 rport=39566 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780996062.877:19887): pid=206009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780996062.877:19888): pid=206009 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=153 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780996062.877:19888): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe5cd77ba0 a2=1 a3=0 items=0 ppid=37599 pid=206009 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=153 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780996062.877:19888): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780996062.878:19889): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780996062.915:19890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780996062.947:19891): pid=206051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1780996062.947:19892): pid=206051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1780996062.948:19893): pid=206051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780996062.949:19894): pid=206051 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=154 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780996062.949:19894): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd323a9ea0 a2=1 a3=0 items=0 ppid=1 pid=206051 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=154 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780996062.949:19894): proctitle="(systemd)"
type=USER_START msg=audit(1780996062.951:19895): pid=206051 uid=0 auid=0 ses=154 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1780996062.965:19896): prog-id=718 op=LOAD
type=SYSCALL msg=audit(1780996062.965:19896): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd32477210 a2=90 a3=0 items=0 ppid=1 pid=206051 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=154 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780996062.965:19896): proctitle="(systemd)"
type=BPF msg=audit(1780996062.966:19897): prog-id=0 op=UNLOAD
type=BPF msg=audit(1780996062.966:19898): prog-id=719 op=LOAD
type=SYSCALL msg=audit(1780996062.966:19898): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd324772b0 a2=90 a3=4 items=0 ppid=1 pid=206051 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=154 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780996062.966:19898): proctitle="(systemd)"
type=BPF msg=audit(1780996062.966:19899): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1780996063.053:19900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780996063.075:19901): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996063.076:19902): pid=206066 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780996063.078:19903): pid=206066 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780996063.122:19904): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780996063.123:19905): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780996063.125:19906): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780996063.185:19907): pid=206080 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780996063.186:19908): pid=206080 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780996063.186:19909): pid=206080 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780996063.191:19910): pid=206080 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780996063.204:19911): pid=206080 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780996063.204:19912): pid=206080 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996063.208:19913): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206066 suid=0 rport=39566 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996063.210:19914): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780996063.216:19915): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780996063.217:19916): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780996063.218:19917): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780996063.218:19918): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780996063.218:19919): pid=206009 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1780996064.182:19920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996064.314:19921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996064.559:19922): pid=206111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996064.560:19923): pid=206110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206111 suid=74 rport=39574 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996064.560:19924): pid=206110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206111 suid=74 rport=39574 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780996064.650:19925): pid=206110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996064.650:19926): pid=206110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780996064.680:19927): pid=206110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996064.681:19928): pid=206110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206111 suid=74 rport=39574 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780996064.683:19929): pid=206110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780996064.683:19930): pid=206110 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=155 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780996064.683:19930): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf88437f0 a2=1 a3=0 items=0 ppid=37599 pid=206110 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=155 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780996064.683:19930): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780996064.685:19931): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780996064.719:19932): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996064.720:19933): pid=206113 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780996064.721:19934): pid=206113 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780996064.765:19935): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780996064.765:19936): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780996064.769:19937): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206114 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780996064.835:19938): pid=206114 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780996064.835:19939): pid=206114 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6E6674206164642072756C6520696E65742066696C74657220494E505554206970207361646472203137322E31372E312E302F3234207463702064706F72742036363431206374207374617465206E657720636F756E74657220616363657074 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780996064.837:19940): pid=206114 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780996064.841:19941): pid=206114 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=NETFILTER_CFG msg=audit(1780996064.852:19942): table=filter:5 family=1 entries=1 op=nft_register_rule pid=206131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1780996064.852:19942): arch=c000003e syscall=46 success=yes exit=652 a0=3 a1=7ffd3a681e80 a2=0 a3=7fe7de9a5bc4 items=0 ppid=206114 pid=206131 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=155 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780996064.852:19942): proctitle=6E6674006164640072756C6500696E65740066696C74657200494E505554006970007361646472003137322E31372E312E302F3234007463700064706F72740036363431006374007374617465006E657700636F756E74657200616363657074
type=USER_END msg=audit(1780996064.854:19943): pid=206114 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780996064.854:19944): pid=206114 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996064.857:19945): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206113 suid=0 rport=39574 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996064.857:19946): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206113 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780996064.859:19947): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780996064.860:19948): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780996064.861:19949): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780996064.861:19950): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780996064.861:19951): pid=206110 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996064.882:19952): pid=206138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996064.883:19953): pid=206136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206138 suid=74 rport=39588 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996064.883:19954): pid=206136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206138 suid=74 rport=39588 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780996064.957:19955): pid=206136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996064.957:19956): pid=206136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780996064.987:19957): pid=206136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996064.987:19958): pid=206136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206138 suid=74 rport=39588 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780996064.989:19959): pid=206136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780996064.990:19960): pid=206136 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=156 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780996064.990:19960): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc7a84a260 a2=1 a3=0 items=0 ppid=37599 pid=206136 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=156 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780996064.990:19960): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780996064.991:19961): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780996065.023:19962): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996065.024:19963): pid=206140 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780996065.025:19964): pid=206140 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780996065.067:19965): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780996065.067:19966): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780996065.069:19967): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780996065.127:19968): pid=206141 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780996065.127:19969): pid=206141 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6E6674206164642072756C6520696E65742066696C74657220494E505554206970207361646472203137322E31372E312E302F3234207463702064706F72742036363432206374207374617465206E657720636F756E74657220616363657074 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780996065.128:19970): pid=206141 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780996065.131:19971): pid=206141 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=NETFILTER_CFG msg=audit(1780996065.139:19972): table=filter:6 family=1 entries=1 op=nft_register_rule pid=206155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1780996065.139:19972): arch=c000003e syscall=46 success=yes exit=652 a0=3 a1=7ffd90c3ef80 a2=0 a3=7f962a7a1bc4 items=0 ppid=206141 pid=206155 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=156 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780996065.139:19972): proctitle=6E6674006164640072756C6500696E65740066696C74657200494E505554006970007361646472003137322E31372E312E302F3234007463700064706F72740036363432006374007374617465006E657700636F756E74657200616363657074
type=USER_END msg=audit(1780996065.140:19973): pid=206141 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780996065.141:19974): pid=206141 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996065.143:19975): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206140 suid=0 rport=39588 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996065.144:19976): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780996065.147:19977): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780996065.147:19978): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780996065.147:19979): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780996065.148:19980): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780996065.148:19981): pid=206136 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996068.488:19982): pid=206181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996068.489:19983): pid=206180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206181 suid=74 rport=52406 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996068.490:19984): pid=206180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206181 suid=74 rport=52406 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780996068.572:19985): pid=206180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996068.572:19986): pid=206180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780996068.601:19987): pid=206180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996068.601:19988): pid=206180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206181 suid=74 rport=52406 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780996068.603:19989): pid=206180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780996068.604:19990): pid=206180 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=157 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780996068.604:19990): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd2be06160 a2=1 a3=0 items=0 ppid=37599 pid=206180 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=157 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780996068.604:19990): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780996068.605:19991): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1780996068.622:19992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780996068.639:19993): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996068.641:19994): pid=206188 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780996068.642:19995): pid=206188 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780996068.688:19996): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780996068.688:19997): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780996068.690:19998): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206197 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780996068.763:19999): pid=206213 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780996068.763:20000): pid=206213 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780996068.764:20001): pid=206213 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780996068.768:20002): pid=206213 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780996068.782:20003): pid=206213 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780996068.783:20004): pid=206213 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996068.786:20005): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206188 suid=0 rport=52406 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996068.786:20006): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780996068.789:20007): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780996068.790:20008): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780996068.791:20009): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780996068.791:20010): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780996068.791:20011): pid=206180 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1780996068.794:20012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996069.811:20013): pid=206482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206482 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996069.813:20014): pid=206481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206482 suid=74 rport=52410 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996069.813:20015): pid=206481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206482 suid=74 rport=52410 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780996069.886:20016): pid=206481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996069.886:20017): pid=206481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780996069.915:20018): pid=206481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996069.916:20019): pid=206481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206482 suid=74 rport=52410 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780996069.918:20020): pid=206481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780996069.918:20021): pid=206481 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=158 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1780996069.918:20021): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff403967a0 a2=1 a3=0 items=0 ppid=37599 pid=206481 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=158 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780996069.918:20021): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780996069.920:20022): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780996069.942:20023): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996069.944:20024): pid=206484 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206484 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1780996069.945:20025): pid=206484 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1780996069.989:20026): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1780996069.990:20027): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780996069.993:20028): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206493 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1780996070.051:20029): pid=206506 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1780996070.052:20030): pid=206506 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1780996070.052:20031): pid=206506 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1780996070.056:20032): pid=206506 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780996070.070:20033): pid=206506 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780996070.071:20034): pid=206506 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996070.074:20035): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206484 suid=0 rport=52410 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996070.074:20036): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206484 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1780996070.077:20037): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1780996070.077:20038): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1780996070.078:20039): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1780996070.078:20040): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1780996070.078:20041): pid=206481 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=206481 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_DISP msg=audit(1780996080.182:20042): pid=206053 uid=0 auid=0 ses=154 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1780996080.183:20043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996080.204:20044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996083.184:20045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996083.185:20046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996083.408:20047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996083.479:20048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996095.185:20049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996095.307:20050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996099.181:20051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996099.303:20052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996107.336:20053): pid=208218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=208218 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996107.609:20054): pid=208217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=208218 suid=74 rport=42072 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996107.609:20055): pid=208217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=208218 suid=74 rport=42072 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996109.055:20056): pid=208217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=208218 suid=74 rport=42072 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996109.055:20057): pid=208217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=208218 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996109.056:20058): pid=208217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996109.056:20059): pid=208217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=208217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996109.056:20060): pid=208217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996114.186:20061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996114.189:20062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996114.396:20063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996114.484:20064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996126.182:20065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996126.291:20066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996130.180:20067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996130.312:20068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996145.182:20069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996145.184:20070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996145.363:20071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996145.479:20072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996157.187:20073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996157.304:20074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996161.184:20075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996161.282:20076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996176.186:20077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996176.189:20078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996176.384:20079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996176.565:20080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996188.183:20081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996188.297:20082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996192.186:20083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996192.323:20084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996207.183:20085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996207.187:20086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996207.338:20087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996207.545:20088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996219.182:20089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996219.316:20090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996223.182:20091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996223.296:20092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996231.580:20093): pid=214980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=214980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996231.850:20094): pid=214979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=214980 suid=74 rport=54428 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996231.850:20095): pid=214979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=214980 suid=74 rport=54428 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996233.294:20096): pid=214979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=214980 suid=74 rport=54428 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996233.294:20097): pid=214979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=214980 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996233.295:20098): pid=214979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.148.100.146 addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996233.296:20099): pid=214979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=214979 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996233.296:20100): pid=214979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.148.100.146 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996238.187:20101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996238.190:20102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996238.359:20103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996238.573:20104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996250.186:20105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996250.331:20106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996254.181:20107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996254.290:20108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996269.181:20109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996269.185:20110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996269.359:20111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996269.538:20112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996281.181:20113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996281.291:20114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996285.181:20115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996285.320:20116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996300.189:20117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996300.192:20118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996300.352:20119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996300.557:20120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996312.179:20121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996312.279:20122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996316.182:20123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996316.293:20124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996331.185:20125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996331.188:20126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996331.398:20127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996331.487:20128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996343.180:20129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996343.287:20130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996346.783:20131): pid=221058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=221058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780996347.208:20132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996347.323:20133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996362.186:20134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996362.188:20135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996362.390:20136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996362.549:20137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996374.181:20138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996374.316:20139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996378.182:20140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996378.293:20141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996383.075:20142): pid=223112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=223112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996383.184:20143): pid=223111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=223112 suid=74 rport=37970 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996383.184:20144): pid=223111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=223112 suid=74 rport=37970 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996383.833:20145): pid=223111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=223112 suid=74 rport=37970 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996383.833:20146): pid=223111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=223112 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996383.834:20147): pid=223111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.118.39.236 addr=92.118.39.236 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996383.834:20148): pid=223111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=223111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996383.834:20149): pid=223111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996393.182:20150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996393.185:20151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996393.407:20152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996393.496:20153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996405.182:20154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996405.339:20155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996409.186:20156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996409.302:20157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996423.483:20158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996423.586:20159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996423.660:20160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996423.956:20161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996436.181:20162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996436.322:20163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996440.182:20164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996440.319:20165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996454.189:20166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996454.191:20167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996454.410:20168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996454.514:20169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996457.899:20170): pid=226979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=226979 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996458.145:20171): pid=226978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=226979 suid=74 rport=42536 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996458.146:20172): pid=226978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=226979 suid=74 rport=42536 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996459.485:20173): pid=226978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=226979 suid=74 rport=42536 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996459.485:20174): pid=226978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=226979 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996459.486:20175): pid=226978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996459.487:20176): pid=226978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=226978 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996459.487:20177): pid=226978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996467.183:20178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996467.305:20179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996471.186:20180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996471.293:20181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996484.129:20182): pid=227849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=227849 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780996485.186:20183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996485.189:20184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996485.387:20185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996485.476:20186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996488.979:20187): pid=228660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996489.167:20188): pid=228670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996489.249:20189): pid=228669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=diffie-hellman-group-exchange-sha256 spid=228670 suid=74 rport=57306 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.201.227 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996489.249:20190): pid=228669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=diffie-hellman-group-exchange-sha256 spid=228670 suid=74 rport=57306 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.201.227 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996489.698:20191): pid=228659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=228660 suid=74 rport=57304 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.201.227 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996489.698:20192): pid=228659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=228660 suid=74 rport=57304 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.201.227 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996489.699:20193): pid=228669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=228670 suid=74 rport=57306 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.201.227 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996489.699:20194): pid=228669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228670 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996489.700:20195): pid=228669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=34.78.201.227 addr=34.78.201.227 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996489.700:20196): pid=228669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228669 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996489.700:20197): pid=228669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=34.78.201.227 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996491.513:20198): pid=228687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228687 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996494.689:20199): pid=228920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228920 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996494.787:20200): pid=228919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=228920 suid=74 rport=12146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996494.787:20201): pid=228919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=228920 suid=74 rport=12146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996495.245:20202): pid=228919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=228920 suid=74 rport=12146 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996495.245:20203): pid=228919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228920 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996495.246:20204): pid=228919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=34.78.66.84 addr=34.78.66.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996495.247:20205): pid=228919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996495.247:20206): pid=228919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996495.348:20207): pid=228980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996495.396:20208): pid=228970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228970 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996495.446:20209): pid=228979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228980 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996495.447:20210): pid=228979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228979 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996495.447:20211): pid=228979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996495.803:20212): pid=228998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996495.883:20213): pid=228984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228998 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996495.884:20214): pid=228984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996495.884:20215): pid=228984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996496.153:20216): pid=229045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996496.233:20217): pid=229044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=229045 suid=74 rport=12184 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996496.234:20218): pid=229044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=229045 suid=74 rport=12184 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996496.361:20219): pid=229044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996496.361:20220): pid=229044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996496.654:20221): pid=229164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996496.734:20222): pid=229083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=229164 suid=74 rport=12194 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996496.735:20223): pid=229083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=229164 suid=74 rport=12194 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996496.958:20224): pid=229083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=229164 suid=74 rport=12194 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996496.959:20225): pid=229083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229164 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996496.960:20226): pid=229083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996496.960:20227): pid=229083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996497.161:20228): pid=229167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996497.241:20229): pid=229165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229167 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996497.242:20230): pid=229165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996497.242:20231): pid=229165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996497.510:20232): pid=229186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229186 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996497.591:20233): pid=229185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229186 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996497.592:20234): pid=229185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229185 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996497.592:20235): pid=229185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996497.611:20236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996497.745:20237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996497.859:20238): pid=229209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229209 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996497.940:20239): pid=229208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=229209 suid=74 rport=12230 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996497.940:20240): pid=229208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha256 spid=229209 suid=74 rport=12230 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996498.159:20241): pid=229208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=229209 suid=74 rport=12230 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996498.159:20242): pid=229208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229209 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996498.160:20243): pid=229208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=229208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996498.160:20244): pid=229208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=34.78.66.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996502.182:20245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996502.306:20246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996516.181:20247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996516.184:20248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996516.384:20249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996516.532:20250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996528.180:20251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996528.332:20252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996533.182:20253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996533.334:20254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996547.193:20255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996547.196:20256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996547.368:20257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996547.577:20258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996559.182:20259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996559.255:20260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996564.182:20261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996564.296:20262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996564.816:20263): pid=228659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=228660 suid=74 rport=57304 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=34.78.201.227 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996564.817:20264): pid=228659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228660 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996564.817:20265): pid=228659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=228659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996564.818:20266): pid=228659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=34.78.201.227 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996578.187:20267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996578.189:20268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996578.382:20269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996578.464:20270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996590.181:20271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996590.293:20272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996595.186:20273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996595.299:20274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996602.810:20275): pid=234545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=234545 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780996609.186:20276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996609.189:20277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996609.435:20278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996609.521:20279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996621.182:20280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996621.328:20281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996626.182:20282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996626.324:20283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996640.187:20284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996640.190:20285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996640.430:20286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996640.539:20287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996647.714:20288): pid=236412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=236412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780996652.187:20289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996652.314:20290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996657.181:20291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996657.281:20292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996671.186:20293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996671.189:20294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996671.416:20295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996671.502:20296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996683.181:20297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996683.283:20298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996688.182:20299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996688.302:20300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996702.180:20301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996702.184:20302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996702.329:20303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996702.505:20304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996713.789:20305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996713.930:20306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996719.193:20307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996719.326:20308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996733.185:20309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996733.187:20310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996733.357:20311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996733.526:20312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996739.030:20313): pid=241823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=241823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996739.046:20314): pid=241828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=241828 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996739.148:20315): pid=241820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=241823 suid=74 rport=45668 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=79.122.55.140 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996739.148:20316): pid=241820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=241823 suid=74 rport=45668 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=79.122.55.140 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996739.162:20317): pid=241821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=241828 suid=74 rport=45670 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=79.122.55.140 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996739.163:20318): pid=241821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=241828 suid=74 rport=45670 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=79.122.55.140 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996739.821:20319): pid=241820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241823 suid=74 rport=45668 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=79.122.55.140 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996739.821:20320): pid=241820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=241823 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996739.822:20321): pid=241820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=79.122.55.140 addr=79.122.55.140 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996739.822:20322): pid=241820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=241820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780996739.823:20323): pid=241821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241828 suid=74 rport=45670 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=79.122.55.140 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1780996739.823:20324): pid=241820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=79.122.55.140 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996739.823:20325): pid=241821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=241828 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996739.824:20326): pid=241821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=79.122.55.140 addr=79.122.55.140 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996739.824:20327): pid=241821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=241821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996739.824:20328): pid=241821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=79.122.55.140 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996740.480:20329): pid=241951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=241951 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996740.570:20330): pid=241950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=241951 suid=74 rport=17972 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996740.570:20331): pid=241950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=241951 suid=74 rport=17972 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996741.126:20332): pid=241950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241951 suid=74 rport=17972 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996741.126:20333): pid=241950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=241951 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996741.127:20334): pid=241950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.147 addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996741.127:20335): pid=241950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=241950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996741.127:20336): pid=241950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996744.187:20337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996744.319:20338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996750.180:20339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996750.308:20340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996764.182:20341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996764.185:20342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996764.353:20343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996764.571:20344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996775.180:20345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996775.322:20346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996781.183:20347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996781.320:20348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996795.189:20349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996795.193:20350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996795.374:20351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996795.549:20352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996806.193:20353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996806.307:20354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996812.180:20355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996812.300:20356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996826.186:20357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996826.189:20358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996826.392:20359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996826.497:20360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996837.182:20361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996837.325:20362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996843.184:20363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996843.289:20364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996857.187:20365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996857.190:20366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996857.319:20367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996857.498:20368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996868.181:20369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996868.307:20370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996874.182:20371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996874.314:20372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996888.191:20373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996888.194:20374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996888.451:20375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996888.476:20376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996899.182:20377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996899.300:20378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996904.489:20379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996904.652:20380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996915.850:20381): pid=251337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=251337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996915.973:20382): pid=251336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=251337 suid=74 rport=47790 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996915.973:20383): pid=251336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=251337 suid=74 rport=47790 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996916.705:20384): pid=251336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=251337 suid=74 rport=47790 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996916.705:20385): pid=251336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=251337 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996916.705:20386): pid=251336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996916.706:20387): pid=251336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=251336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996916.706:20388): pid=251336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996919.183:20389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996919.186:20390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996919.392:20391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996919.488:20392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996926.211:20393): pid=251925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=251925 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996926.461:20394): pid=251924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=251925 suid=74 rport=44260 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996926.461:20395): pid=251924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=251925 suid=74 rport=44260 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996927.816:20396): pid=251924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=251925 suid=74 rport=44260 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996927.817:20397): pid=251924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=251925 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996927.817:20398): pid=251924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996927.818:20399): pid=251924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=251924 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996927.818:20400): pid=251924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996930.187:20401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996930.311:20402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996935.184:20403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996935.300:20404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996943.854:20405): pid=252594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=252594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780996943.946:20406): pid=252593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=252594 suid=74 rport=36046 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780996943.946:20407): pid=252593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=252594 suid=74 rport=36046 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996944.512:20408): pid=252593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=252594 suid=74 rport=36046 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780996944.512:20409): pid=252593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=252594 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780996944.513:20410): pid=252593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780996944.513:20411): pid=252593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=252593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780996944.513:20412): pid=252593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996950.182:20413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996950.185:20414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996950.334:20415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996950.520:20416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996961.183:20417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996961.298:20418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996966.182:20419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996966.317:20420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996981.183:20421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996981.187:20422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996981.396:20423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996981.499:20424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996992.182:20425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996992.301:20426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780996997.185:20427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780996997.329:20428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997007.842:20429): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24134 suid=1002 rport=50564 laddr=192.168.122.106 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1780997007.847:20430): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1780997007.847:20431): pid=24114 uid=0 auid=1002 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1780997012.184:20432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997012.187:20433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997012.413:20434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997012.472:20435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997017.933:20436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997017.965:20437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997023.184:20438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997023.292:20439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997028.183:20440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997028.302:20441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997043.182:20442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997043.185:20443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997043.389:20444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997043.569:20445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997054.191:20446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997054.328:20447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997059.185:20448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997059.289:20449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997074.180:20450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997074.182:20451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997074.405:20452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997074.479:20453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997084.938:20454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997085.066:20455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997085.083:20456): pid=260137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=260137 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997085.326:20457): pid=260133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=260137 suid=74 rport=39660 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997085.326:20458): pid=260133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=260137 suid=74 rport=39660 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997086.649:20459): pid=260133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260137 suid=74 rport=39660 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997086.649:20460): pid=260133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=260137 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997086.650:20461): pid=260133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997086.650:20462): pid=260133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=260133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997086.650:20463): pid=260133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997090.182:20464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997090.270:20465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997092.155:20466): pid=260662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=260662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997092.245:20467): pid=260661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=260662 suid=74 rport=6446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997092.245:20468): pid=260661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=260662 suid=74 rport=6446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997092.804:20469): pid=260661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260662 suid=74 rport=6446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997092.804:20470): pid=260661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=260662 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997092.805:20471): pid=260661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.147 addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997092.806:20472): pid=260661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=260661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997092.806:20473): pid=260661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.147 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997105.183:20474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997105.188:20475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997105.397:20476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997105.535:20477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997108.236:20478): pid=261557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=261557 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997108.326:20479): pid=261556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=261557 suid=74 rport=52170 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997108.327:20480): pid=261556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=261557 suid=74 rport=52170 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997108.892:20481): pid=261556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=261557 suid=74 rport=52170 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997108.892:20482): pid=261556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=261557 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997108.893:20483): pid=261556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997108.893:20484): pid=261556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=261556 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997108.893:20485): pid=261556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997115.180:20486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997115.326:20487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997121.187:20488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997121.265:20489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997136.181:20490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997136.183:20491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997136.296:20492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997136.567:20493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997145.383:20494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997145.492:20495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997152.183:20496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997152.289:20497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997167.189:20498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997167.192:20499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997167.366:20500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997167.545:20501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997176.185:20502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997176.331:20503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997183.181:20504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997183.306:20505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997186.709:20506): pid=265493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=265493 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997186.960:20507): pid=265492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=265493 suid=74 rport=60164 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997186.960:20508): pid=265492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=265493 suid=74 rport=60164 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997188.365:20509): pid=265492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=265493 suid=74 rport=60164 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997188.366:20510): pid=265492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=265493 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997188.366:20511): pid=265492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997188.366:20512): pid=265492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=265492 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997188.366:20513): pid=265492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997198.181:20514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997198.183:20515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997198.346:20516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997198.549:20517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997206.457:20518): pid=266727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=266727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997206.458:20519): pid=266726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=266727 suid=74 rport=38640 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.168 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997206.459:20520): pid=266726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=266727 suid=74 rport=38640 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.168 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780997207.182:20521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997207.306:20522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997207.478:20523): pid=266962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=266962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997207.602:20524): pid=266961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=266962 suid=74 rport=43900 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997207.602:20525): pid=266961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=266962 suid=74 rport=43900 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997207.683:20526): pid=266726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=266727 suid=74 rport=38640 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.92.168 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997207.683:20527): pid=266726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=266727 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997207.684:20528): pid=266726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.92.168 addr=80.94.92.168 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997207.684:20529): pid=266726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=266726 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997207.685:20530): pid=266726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.92.168 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997208.334:20531): pid=266961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=266962 suid=74 rport=43900 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997208.334:20532): pid=266961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=266962 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997208.335:20533): pid=266961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.241.40.34 addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997208.335:20534): pid=266961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=266961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997208.335:20535): pid=266961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997214.092:20536): pid=267075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=267075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780997214.184:20537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780997214.186:20538): pid=267074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=267075 suid=74 rport=58410 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997214.186:20539): pid=267074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=267075 suid=74 rport=58410 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780997214.276:20540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997214.759:20541): pid=267074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=267075 suid=74 rport=58410 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997214.759:20542): pid=267074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=267075 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997214.760:20543): pid=267074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997214.761:20544): pid=267074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=267074 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997214.761:20545): pid=267074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997229.181:20546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997229.184:20547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997229.382:20548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997229.468:20549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997232.310:20550): pid=268121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=268121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997232.554:20551): pid=268120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=268121 suid=74 rport=42692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997232.554:20552): pid=268120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=268121 suid=74 rport=42692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997233.882:20553): pid=268120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=268121 suid=74 rport=42692 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997233.882:20554): pid=268120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=268121 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997233.884:20555): pid=268120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997233.884:20556): pid=268120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=268120 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997233.884:20557): pid=268120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997238.181:20558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997238.290:20559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997245.181:20560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997245.324:20561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997260.191:20562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997260.194:20563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997260.358:20564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997260.571:20565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997269.195:20566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997269.324:20567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997276.182:20568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997276.319:20569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997291.183:20570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997291.187:20571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997291.346:20572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997291.553:20573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997300.181:20574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997300.294:20575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997307.181:20576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997307.323:20577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997317.894:20578): pid=272536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=272536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997317.986:20579): pid=272535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=272536 suid=74 rport=46676 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997317.986:20580): pid=272535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=272536 suid=74 rport=46676 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997318.555:20581): pid=272535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272536 suid=74 rport=46676 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997318.556:20582): pid=272535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=272536 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997318.556:20583): pid=272535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997318.557:20584): pid=272535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=272535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997318.557:20585): pid=272535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997318.810:20586): pid=272587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=272587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997319.061:20587): pid=272586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=272587 suid=74 rport=50176 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997319.061:20588): pid=272586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=272587 suid=74 rport=50176 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997320.527:20589): pid=272586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=272587 suid=74 rport=50176 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997320.528:20590): pid=272586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=272587 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997320.528:20591): pid=272586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997320.529:20592): pid=272586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=272586 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997320.529:20593): pid=272586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997322.183:20594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997322.186:20595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997322.429:20596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997322.474:20597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997331.181:20598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997331.331:20599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997338.537:20600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997338.599:20601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997348.493:20602): pid=274162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=274162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997348.619:20603): pid=274161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=274162 suid=74 rport=45984 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997348.619:20604): pid=274161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=274162 suid=74 rport=45984 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997349.360:20605): pid=274161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=274162 suid=74 rport=45984 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997349.360:20606): pid=274161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=274162 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997349.360:20607): pid=274161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.241.40.34 addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997349.361:20608): pid=274161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=274161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997349.361:20609): pid=274161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997353.182:20610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997353.185:20611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997353.355:20612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997353.541:20613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997362.181:20614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997362.320:20615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997369.181:20616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997369.300:20617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997376.855:20618): pid=275629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=275629 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997377.099:20619): pid=275628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=275629 suid=74 rport=47060 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997377.099:20620): pid=275628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=275629 suid=74 rport=47060 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997378.426:20621): pid=275628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=275629 suid=74 rport=47060 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997378.427:20622): pid=275628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=275629 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997378.427:20623): pid=275628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997378.427:20624): pid=275628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=275628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997378.427:20625): pid=275628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997384.192:20626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997384.196:20627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997384.388:20628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997384.592:20629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997393.185:20630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997393.330:20631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997400.182:20632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997400.318:20633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997415.187:20634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997415.190:20635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997415.359:20636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997415.550:20637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997424.181:20638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997424.285:20639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997424.633:20640): pid=278280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=278280 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997424.726:20641): pid=278279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=278280 suid=74 rport=51872 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997424.726:20642): pid=278279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=278280 suid=74 rport=51872 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997425.291:20643): pid=278279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=278280 suid=74 rport=51872 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997425.291:20644): pid=278279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=278280 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997425.292:20645): pid=278279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997425.293:20646): pid=278279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=278279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997425.293:20647): pid=278279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997431.183:20648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997431.305:20649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997445.850:20650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997445.854:20651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997446.107:20652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997446.465:20653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997449.340:20654): pid=279824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=279824 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997449.449:20655): pid=279823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=279824 suid=74 rport=38322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997449.449:20656): pid=279823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=279824 suid=74 rport=38322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997450.096:20657): pid=279823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=279824 suid=74 rport=38322 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997450.097:20658): pid=279823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=279824 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997450.097:20659): pid=279823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.227.254.170 addr=45.227.254.170 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997450.098:20660): pid=279823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=279823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997450.098:20661): pid=279823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997455.183:20662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997455.331:20663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997462.185:20664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997462.298:20665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997469.475:20666): pid=280725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=280725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997469.803:20667): pid=280724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=280725 suid=74 rport=53804 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997469.803:20668): pid=280724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=280725 suid=74 rport=53804 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997471.210:20669): pid=280724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=280725 suid=74 rport=53804 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997471.210:20670): pid=280724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=280725 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997471.211:20671): pid=280724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997471.211:20672): pid=280724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=280724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997471.211:20673): pid=280724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997476.181:20674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997476.367:20675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997477.183:20676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997477.477:20677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997486.182:20678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997486.319:20679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997490.481:20680): pid=281845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=281845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997490.606:20681): pid=281844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=281845 suid=74 rport=33848 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997490.607:20682): pid=281844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=281845 suid=74 rport=33848 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997491.349:20683): pid=281844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=281845 suid=74 rport=33848 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997491.349:20684): pid=281844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=281845 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997491.350:20685): pid=281844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.241.40.34 addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997491.351:20686): pid=281844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=281844 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997491.351:20687): pid=281844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997493.181:20688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997493.289:20689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997506.394:20690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997506.577:20691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997508.181:20692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997508.517:20693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997517.190:20694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997517.310:20695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997518.317:20696): pid=283235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=283235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997518.560:20697): pid=283234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=283235 suid=74 rport=32778 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997518.560:20698): pid=283234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=283235 suid=74 rport=32778 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997519.890:20699): pid=283234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=283235 suid=74 rport=32778 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997519.890:20700): pid=283234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=283235 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997519.891:20701): pid=283234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997519.891:20702): pid=283234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=283234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997519.892:20703): pid=283234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997524.181:20704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997524.293:20705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997529.005:20706): pid=283781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=283781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997529.099:20707): pid=283780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=283781 suid=74 rport=34902 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997529.099:20708): pid=283780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=283781 suid=74 rport=34902 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997529.670:20709): pid=283780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=283781 suid=74 rport=34902 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997529.671:20710): pid=283780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=283781 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997529.671:20711): pid=283780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997529.672:20712): pid=283780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=283780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997529.672:20713): pid=283780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997537.185:20714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997537.352:20715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997539.184:20716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997539.456:20717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997548.184:20718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997548.288:20719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997555.190:20720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997555.268:20721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997568.182:20722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997568.372:20723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997570.181:20724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997570.486:20725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997579.181:20726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997579.300:20727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997586.182:20728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997586.291:20729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997599.184:20730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997599.395:20731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997601.183:20732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997601.486:20733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997609.634:20734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997609.636:20735): pid=287968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=287968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997609.877:20736): pid=287966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=287968 suid=74 rport=43844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997609.877:20737): pid=287966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=287968 suid=74 rport=43844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780997610.225:20738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997611.225:20739): pid=287966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=287968 suid=74 rport=43844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997611.226:20740): pid=287966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=287968 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997611.226:20741): pid=287966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997611.227:20742): pid=287966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=287966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997611.227:20743): pid=287966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997617.182:20744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997617.289:20745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997627.368:20746): pid=288980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=288980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997627.460:20747): pid=288979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=288980 suid=74 rport=57066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997627.460:20748): pid=288979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=288980 suid=74 rport=57066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997628.024:20749): pid=288979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=288980 suid=74 rport=57066 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997628.024:20750): pid=288979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=288980 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997628.025:20751): pid=288979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997628.025:20752): pid=288979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=288979 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997628.026:20753): pid=288979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997629.179:20754): pid=289160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=289160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997629.303:20755): pid=289159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=289160 suid=74 rport=53278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997629.304:20756): pid=289159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=289160 suid=74 rport=53278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780997629.917:20757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997630.031:20758): pid=289159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289160 suid=74 rport=53278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997630.032:20759): pid=289159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=289160 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997630.032:20760): pid=289159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997630.033:20761): pid=289159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=289159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997630.033:20762): pid=289159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997630.110:20763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997632.182:20764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997632.485:20765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997641.182:20766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997641.319:20767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997648.180:20768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997648.314:20769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997654.849:20770): pid=290552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=290552 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997655.095:20771): pid=290551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=290552 suid=74 rport=60800 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997655.095:20772): pid=290551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=290552 suid=74 rport=60800 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997656.430:20773): pid=290551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=290552 suid=74 rport=60800 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997656.430:20774): pid=290551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=290552 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997656.431:20775): pid=290551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997656.432:20776): pid=290551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=290551 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997656.432:20777): pid=290551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997660.183:20778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997660.338:20779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997663.191:20780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997663.469:20781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997672.182:20782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997672.320:20783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997679.183:20784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997679.316:20785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997691.182:20786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997691.328:20787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997694.181:20788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997694.479:20789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997703.180:20790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997703.293:20791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997710.183:20792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997710.297:20793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997722.181:20794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997722.337:20795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997723.143:20796): pid=294200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=294200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997723.235:20797): pid=294199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=294200 suid=74 rport=37756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997723.236:20798): pid=294199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=294200 suid=74 rport=37756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997723.802:20799): pid=294199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=294200 suid=74 rport=37756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997723.802:20800): pid=294199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=294200 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997723.803:20801): pid=294199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997723.803:20802): pid=294199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=294199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997723.803:20803): pid=294199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997725.182:20804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997725.514:20805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997734.184:20806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997734.339:20807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997741.181:20808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997741.317:20809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997749.227:20810): pid=295479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=295479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997749.475:20811): pid=295478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=295479 suid=74 rport=45494 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997749.509:20812): pid=295478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=295479 suid=74 rport=45494 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997750.947:20813): pid=295478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=295479 suid=74 rport=45494 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997750.947:20814): pid=295478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=295479 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997750.948:20815): pid=295478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997750.948:20816): pid=295478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=295478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997750.948:20817): pid=295478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997753.181:20818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997753.357:20819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997756.188:20820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997756.447:20821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997765.186:20822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997765.329:20823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997765.920:20824): pid=296400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=296400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997765.991:20825): pid=296399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=296400 suid=74 rport=42936 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997765.991:20826): pid=296399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=296400 suid=74 rport=42936 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997766.447:20827): pid=296399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=296400 suid=74 rport=42936 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997766.447:20828): pid=296399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=296400 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997766.448:20829): pid=296399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.143.231.2 addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997766.449:20830): pid=296399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=296399 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997766.449:20831): pid=296399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997772.182:20832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997772.328:20833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997784.186:20834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997784.352:20835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997787.182:20836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997787.472:20837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997793.347:20838): pid=297831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=297831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997793.590:20839): pid=297830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=297831 suid=74 rport=58868 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997793.590:20840): pid=297830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=297831 suid=74 rport=58868 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997794.913:20841): pid=297830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=297831 suid=74 rport=58868 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997794.913:20842): pid=297830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=297831 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997794.914:20843): pid=297830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997794.914:20844): pid=297830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=297830 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997794.914:20845): pid=297830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997796.182:20846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997796.340:20847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997803.113:20848): pid=298406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=298406 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780997803.184:20849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780997803.222:20850): pid=298405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=298406 suid=74 rport=24210 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997803.222:20851): pid=298405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=298406 suid=74 rport=24210 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780997803.295:20852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997803.875:20853): pid=298405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=298406 suid=74 rport=24210 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997803.876:20854): pid=298405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=298406 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997803.877:20855): pid=298405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=92.118.39.236 addr=92.118.39.236 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997803.877:20856): pid=298405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=298405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997803.877:20857): pid=298405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.236 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997815.186:20858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997815.379:20859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997818.183:20860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997818.516:20861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997824.678:20862): pid=299633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=299633 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997824.864:20863): pid=299632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=299633 suid=74 rport=44756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997824.864:20864): pid=299632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=299633 suid=74 rport=44756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997825.902:20865): pid=299632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299633 suid=74 rport=44756 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997825.902:20866): pid=299632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=299633 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997825.903:20867): pid=299632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997825.904:20868): pid=299632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=299632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997825.904:20869): pid=299632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997827.181:20870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997827.296:20871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997830.806:20872): pid=299755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=299755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997830.899:20873): pid=299754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=299755 suid=74 rport=38182 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997830.899:20874): pid=299754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=299755 suid=74 rport=38182 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997831.465:20875): pid=299754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299755 suid=74 rport=38182 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997831.465:20876): pid=299754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=299755 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997831.466:20877): pid=299754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997831.466:20878): pid=299754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=299754 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997831.467:20879): pid=299754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997834.182:20880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997834.293:20881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997846.182:20882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997846.346:20883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997849.190:20884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997849.509:20885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997858.180:20886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997858.311:20887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997865.180:20888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997865.289:20889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997867.243:20890): pid=301668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=301668 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780997877.186:20891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997877.348:20892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997880.182:20893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997880.486:20894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997880.503:20895): pid=302430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=302430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997882.800:20896): pid=302384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=302430 suid=74 rport=34565 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.213.117.14 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997882.801:20897): pid=302384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=302430 suid=74 rport=34565 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.213.117.14 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997888.056:20898): pid=302384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=302430 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997888.056:20899): pid=302384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=302430 suid=74 rport=34565 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=178.213.117.14 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997888.057:20900): pid=302384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=178.213.117.14 addr=178.213.117.14 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997888.057:20901): pid=302384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=302384 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997888.057:20902): pid=302384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.213.117.14 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997889.182:20903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997889.297:20904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997896.194:20905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997896.315:20906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997898.329:20907): pid=303364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=303364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997898.581:20908): pid=303363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=303364 suid=74 rport=39914 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997898.581:20909): pid=303363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=303364 suid=74 rport=39914 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997900.056:20910): pid=303363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=303364 suid=74 rport=39914 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997900.056:20911): pid=303363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=303364 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997900.057:20912): pid=303363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997900.057:20913): pid=303363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=303363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997900.057:20914): pid=303363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997905.369:20915): pid=303810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=303810 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997905.495:20916): pid=303806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=303810 suid=74 rport=37168 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997905.495:20917): pid=303806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=303810 suid=74 rport=37168 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997906.232:20918): pid=303806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=303810 suid=74 rport=37168 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997906.232:20919): pid=303806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=303810 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997906.233:20920): pid=303806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997906.234:20921): pid=303806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=303806 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997906.234:20922): pid=303806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997908.186:20923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997908.381:20924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997911.182:20925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997911.465:20926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997920.181:20927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997920.328:20928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997927.104:20929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997927.297:20930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997933.162:20931): pid=305393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=305393 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997933.405:20932): pid=305392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=305393 suid=74 rport=58416 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997933.405:20933): pid=305392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=305393 suid=74 rport=58416 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997934.733:20934): pid=305392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=305393 suid=74 rport=58416 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997934.733:20935): pid=305392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=305393 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997934.734:20936): pid=305392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997934.734:20937): pid=305392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=305392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997934.734:20938): pid=305392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997935.882:20939): pid=305421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=305421 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997935.976:20940): pid=305420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=305421 suid=74 rport=33772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997935.976:20941): pid=305420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=305421 suid=74 rport=33772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997936.549:20942): pid=305420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=305421 suid=74 rport=33772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997936.549:20943): pid=305420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=305421 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997936.550:20944): pid=305420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997936.551:20945): pid=305420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=305420 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997936.551:20946): pid=305420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997939.186:20947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997939.350:20948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997942.186:20949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997942.514:20950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997951.059:20951): pid=306212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=306212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780997951.179:20952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780997951.245:20953): pid=306211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=306212 suid=74 rport=32956 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997951.245:20954): pid=306211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=306212 suid=74 rport=32956 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780997951.321:20955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997952.285:20956): pid=306211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=306212 suid=74 rport=32956 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997952.285:20957): pid=306211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=306212 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997952.286:20958): pid=306211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997952.287:20959): pid=306211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=306211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997952.287:20960): pid=306211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997958.182:20961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997958.325:20962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997970.185:20963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997970.382:20964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997973.181:20965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997973.472:20966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997976.628:20967): pid=307598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=307598 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997976.699:20968): pid=307597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=307598 suid=74 rport=51278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997976.699:20969): pid=307597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=307598 suid=74 rport=51278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997977.155:20970): pid=307597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=307598 suid=74 rport=51278 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997977.156:20971): pid=307597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=307598 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997977.157:20972): pid=307597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.143.231.2 addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997977.157:20973): pid=307597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=307597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997977.157:20974): pid=307597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997982.186:20975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997982.296:20976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780997989.184:20977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780997989.302:20978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997991.012:20979): pid=308391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=308391 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780997991.237:20980): pid=308390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=308391 suid=74 rport=42164 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=111.207.12.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780997991.237:20981): pid=308390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=308391 suid=74 rport=42164 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=111.207.12.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997992.695:20982): pid=308390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=308391 suid=74 rport=42164 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=111.207.12.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780997992.695:20983): pid=308390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=308391 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780997992.695:20984): pid=308390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=111.207.12.99 addr=111.207.12.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780997992.696:20985): pid=308390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=308390 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780997992.696:20986): pid=308390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=111.207.12.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998001.181:20987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998001.369:20988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998004.183:20989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998004.482:20990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998013.180:20991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998013.316:20992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998020.180:20993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998020.316:20994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998032.181:20995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998032.352:20996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998035.181:20997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998035.516:20998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998038.782:20999): pid=310765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=310765 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998038.875:21000): pid=310764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=310765 suid=74 rport=47516 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998038.876:21001): pid=310764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=310765 suid=74 rport=47516 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998039.446:21002): pid=310764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=310765 suid=74 rport=47516 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998039.446:21003): pid=310764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=310765 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998039.446:21004): pid=310764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998039.447:21005): pid=310764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=310764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998039.447:21006): pid=310764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998040.706:21007): pid=310865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=310865 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998040.959:21008): pid=310864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=310865 suid=74 rport=56110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998040.959:21009): pid=310864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=310865 suid=74 rport=56110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998042.354:21010): pid=310864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=310865 suid=74 rport=56110 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998042.354:21011): pid=310864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=310865 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998042.355:21012): pid=310864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998042.357:21013): pid=310864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=310864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998042.357:21014): pid=310864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998042.957:21015): pid=311031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=311031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998043.081:21016): pid=311030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=311031 suid=74 rport=38626 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998043.081:21017): pid=311030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=311031 suid=74 rport=38626 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998043.815:21018): pid=311030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=311031 suid=74 rport=38626 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998043.815:21019): pid=311030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=311031 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998043.816:21020): pid=311030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998043.816:21021): pid=311030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=311030 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998043.816:21022): pid=311030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998043.831:21023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998043.921:21024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998051.189:21025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998051.295:21026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998061.161:21027): pid=311998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=311998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998061.398:21028): pid=311997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=311998 suid=74 rport=50818 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=212.115.54.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998061.398:21029): pid=311997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=311998 suid=74 rport=50818 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=212.115.54.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780998063.182:21030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998063.342:21031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998066.015:21032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998066.227:21033): pid=311997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=311998 suid=74 rport=50818 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=212.115.54.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998066.228:21034): pid=311997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=311998 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998066.229:21035): pid=311997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=212.115.54.84 addr=212.115.54.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998066.229:21036): pid=311997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=311997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998066.229:21037): pid=311997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=212.115.54.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998066.326:21038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998068.431:21039): pid=312562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=312562 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998068.643:21040): pid=312561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=312562 suid=74 rport=56950 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998068.643:21041): pid=312561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=312562 suid=74 rport=56950 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998069.816:21042): pid=312561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=312562 suid=74 rport=56950 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998069.816:21043): pid=312561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=312562 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998069.817:21044): pid=312561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998069.817:21045): pid=312561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=312561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998069.817:21046): pid=312561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998074.182:21047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998074.308:21048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998075.534:21049): pid=312899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=312899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998075.779:21050): pid=312898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=312899 suid=74 rport=54652 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998075.779:21051): pid=312898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=312899 suid=74 rport=54652 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998077.108:21052): pid=312898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=312899 suid=74 rport=54652 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998077.109:21053): pid=312898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=312899 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998077.109:21054): pid=312898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998077.110:21055): pid=312898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=312898 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998077.110:21056): pid=312898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998082.185:21057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998082.331:21058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998094.185:21059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998094.380:21060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998097.182:21061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998097.488:21062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998105.182:21063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998105.321:21064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998113.193:21065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998113.303:21066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998125.187:21067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998125.359:21068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998128.181:21069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998128.505:21070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998136.182:21071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998136.316:21072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998144.181:21073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998144.330:21074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998147.600:21075): pid=316715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=316715 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998147.691:21076): pid=316714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=316715 suid=74 rport=34952 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998147.691:21077): pid=316714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=316715 suid=74 rport=34952 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998148.260:21078): pid=316714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=316715 suid=74 rport=34952 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998148.260:21079): pid=316714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=316715 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998148.261:21080): pid=316714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998148.262:21081): pid=316714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=316714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998148.262:21082): pid=316714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998156.184:21083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998156.384:21084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998156.705:21085): pid=317200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=317200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998156.813:21086): pid=317199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=317200 suid=74 rport=34782 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998156.814:21087): pid=317199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=317200 suid=74 rport=34782 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998157.460:21088): pid=317199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317200 suid=74 rport=34782 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998157.460:21089): pid=317199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=317200 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998157.461:21090): pid=317199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.227.254.170 addr=45.227.254.170 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998157.461:21091): pid=317199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=317199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998157.461:21092): pid=317199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998159.181:21093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998159.471:21094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998167.180:21095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998167.293:21096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998175.181:21097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998175.326:21098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998179.685:21099): pid=318355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=318355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998179.809:21100): pid=318354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318355 suid=74 rport=39762 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998179.809:21101): pid=318354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318355 suid=74 rport=39762 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998180.539:21102): pid=318354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318355 suid=74 rport=39762 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998180.539:21103): pid=318354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=318355 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998180.539:21104): pid=318354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998180.540:21105): pid=318354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=318354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998180.540:21106): pid=318354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998187.183:21107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998187.368:21108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998189.891:21109): pid=318905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=318905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998190.140:21110): pid=318904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318905 suid=74 rport=54050 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998190.140:21111): pid=318904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318905 suid=74 rport=54050 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780998190.185:21112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998190.497:21113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998191.508:21114): pid=318904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318905 suid=74 rport=54050 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998191.508:21115): pid=318904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=318905 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998191.509:21116): pid=318904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998191.509:21117): pid=318904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=318904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998191.510:21118): pid=318904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998197.496:21119): pid=319438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=319438 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998197.687:21120): pid=319437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319438 suid=74 rport=32986 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998197.688:21121): pid=319437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319438 suid=74 rport=32986 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780998198.179:21122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998198.288:21123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998198.754:21124): pid=319437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319438 suid=74 rport=32986 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998198.754:21125): pid=319437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=319438 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998198.754:21126): pid=319437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998198.755:21127): pid=319437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=319437 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998198.755:21128): pid=319437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998206.181:21129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998206.353:21130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998218.181:21131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998218.342:21132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998221.182:21133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998221.479:21134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998223.291:21135): pid=320622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=320622 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998223.536:21136): pid=320621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320622 suid=74 rport=39366 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998223.536:21137): pid=320621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320622 suid=74 rport=39366 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998224.878:21138): pid=320621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320622 suid=74 rport=39366 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998224.879:21139): pid=320621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=320622 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998224.880:21140): pid=320621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998224.880:21141): pid=320621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=320621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998224.880:21142): pid=320621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998228.357:21143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998228.489:21144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998237.182:21145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998237.310:21146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998249.182:21147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998249.372:21148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998252.181:21149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998252.514:21150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998256.313:21151): pid=322518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=322518 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998256.405:21152): pid=322517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322518 suid=74 rport=41470 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998256.405:21153): pid=322517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322518 suid=74 rport=41470 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998256.977:21154): pid=322517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322518 suid=74 rport=41470 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998256.977:21155): pid=322517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=322518 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998256.978:21156): pid=322517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998256.979:21157): pid=322517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=322517 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998256.979:21158): pid=322517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998259.181:21159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998259.310:21160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998268.182:21161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998268.409:21162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998280.184:21163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998280.351:21164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998283.181:21165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998283.505:21166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998290.182:21167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998290.323:21168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998299.182:21169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998299.301:21170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998311.190:21171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998311.389:21172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998314.186:21173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998314.502:21174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998318.862:21175): pid=325802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=325802 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998318.986:21176): pid=325801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325802 suid=74 rport=42638 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998318.986:21177): pid=325801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325802 suid=74 rport=42638 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998319.714:21178): pid=325801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325802 suid=74 rport=42638 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998319.715:21179): pid=325801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=325802 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998319.715:21180): pid=325801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998319.716:21181): pid=325801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=325801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998319.716:21182): pid=325801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998321.186:21183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998321.288:21184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998329.878:21185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998329.880:21186): pid=326349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=326349 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1780998329.985:21187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780998330.067:21188): pid=326347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326349 suid=74 rport=36710 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998330.068:21189): pid=326347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326349 suid=74 rport=36710 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998331.133:21190): pid=326347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326349 suid=74 rport=36710 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998331.133:21191): pid=326347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=326349 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998331.134:21192): pid=326347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998331.135:21193): pid=326347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=326347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998331.135:21194): pid=326347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998341.780:21195): pid=326894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=326894 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998342.032:21196): pid=326893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326894 suid=74 rport=38052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998342.033:21197): pid=326893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326894 suid=74 rport=38052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780998342.185:21198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998342.337:21199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998343.456:21200): pid=326893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326894 suid=74 rport=38052 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998343.456:21201): pid=326893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=326894 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998343.456:21202): pid=326893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998343.456:21203): pid=326893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=326893 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998343.456:21204): pid=326893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998345.181:21205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998345.506:21206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998352.181:21207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998352.292:21208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998360.182:21209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998360.317:21210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998360.401:21211): pid=327988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=327988 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998360.494:21212): pid=327987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327988 suid=74 rport=50582 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998360.494:21213): pid=327987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327988 suid=74 rport=50582 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998361.065:21214): pid=327987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327988 suid=74 rport=50582 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998361.066:21215): pid=327987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=327988 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998361.066:21216): pid=327987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998361.067:21217): pid=327987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=327987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998361.067:21218): pid=327987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998361.223:21219): pid=327990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=327990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998361.293:21220): pid=327989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327990 suid=74 rport=53778 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998361.293:21221): pid=327989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327990 suid=74 rport=53778 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998361.751:21222): pid=327989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327990 suid=74 rport=53778 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998361.751:21223): pid=327989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=327990 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998361.751:21224): pid=327989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.143.231.2 addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998361.752:21225): pid=327989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=327989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998361.752:21226): pid=327989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998366.657:21227): pid=328477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=328477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998366.908:21228): pid=328476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=328477 suid=74 rport=57576 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998366.908:21229): pid=328476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=328477 suid=74 rport=57576 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998368.275:21230): pid=328476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=328477 suid=74 rport=57576 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998368.276:21231): pid=328476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=328477 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998368.276:21232): pid=328476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998368.277:21233): pid=328476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=328476 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998368.277:21234): pid=328476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998373.184:21235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998373.352:21236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998376.182:21237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998376.492:21238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998383.182:21239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998383.289:21240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998391.190:21241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998391.308:21242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998404.186:21243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998404.336:21244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998407.190:21245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998407.453:21246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998414.179:21247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998414.302:21248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998422.182:21249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998422.287:21250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998435.182:21251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998435.359:21252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998438.182:21253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998438.444:21254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998445.182:21255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998445.321:21256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998452.752:21257): pid=332780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=332780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998452.875:21258): pid=332777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=332780 suid=74 rport=43992 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998452.875:21259): pid=332777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=332780 suid=74 rport=43992 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780998453.185:21260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998453.292:21261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998453.607:21262): pid=332777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=332780 suid=74 rport=43992 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998453.607:21263): pid=332777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=332780 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998453.608:21264): pid=332777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.241.40.34 addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998453.608:21265): pid=332777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=332777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998453.609:21266): pid=332777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998460.903:21267): pid=333254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=333254 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998461.096:21268): pid=333253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=333254 suid=74 rport=44132 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998461.096:21269): pid=333253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=333254 suid=74 rport=44132 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998462.058:21270): pid=333264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=333264 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998462.154:21271): pid=333263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=333264 suid=74 rport=55682 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998462.154:21272): pid=333263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=333264 suid=74 rport=55682 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998462.159:21273): pid=333253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=333254 suid=74 rport=44132 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998462.159:21274): pid=333253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=333254 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998462.160:21275): pid=333253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998462.161:21276): pid=333253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=333253 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998462.161:21277): pid=333253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998462.725:21278): pid=333263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=333264 suid=74 rport=55682 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998462.725:21279): pid=333263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=333264 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998462.726:21280): pid=333263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998462.726:21281): pid=333263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=333263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998462.726:21282): pid=333263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998466.180:21283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998466.347:21284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998468.511:21285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998468.796:21286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998476.185:21287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998476.325:21288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998484.189:21289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998484.332:21290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998486.682:21291): pid=334695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=334695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998486.934:21292): pid=334636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=334695 suid=74 rport=50208 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998486.934:21293): pid=334636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=334695 suid=74 rport=50208 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998488.323:21294): pid=334636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=334695 suid=74 rport=50208 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998488.324:21295): pid=334636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=334695 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998488.324:21296): pid=334636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998488.325:21297): pid=334636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=334636 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998488.325:21298): pid=334636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998497.182:21299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998497.372:21300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998499.183:21301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998499.503:21302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998507.181:21303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998507.311:21304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998507.840:21305): pid=335955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=335955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998508.083:21306): pid=335954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=335955 suid=74 rport=37562 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998508.083:21307): pid=335954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=335955 suid=74 rport=37562 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998509.406:21308): pid=335954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=335955 suid=74 rport=37562 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998509.407:21309): pid=335954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=335955 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998509.407:21310): pid=335954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998509.408:21311): pid=335954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=335954 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998509.408:21312): pid=335954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998511.454:21313): pid=335989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=335989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998511.544:21314): pid=335988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=335989 suid=74 rport=1574 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998511.544:21315): pid=335988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=335989 suid=74 rport=1574 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998512.103:21316): pid=335988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=335989 suid=74 rport=1574 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998512.103:21317): pid=335988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=335989 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998512.104:21318): pid=335988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.151 addr=45.148.10.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998512.104:21319): pid=335988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=335988 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998512.104:21320): pid=335988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.151 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998515.184:21321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998515.319:21322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998528.182:21323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998528.352:21324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998530.187:21325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998530.467:21326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998530.576:21327): pid=337192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=337192 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998530.678:21328): pid=337187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=337192 suid=74 rport=53874 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998530.678:21329): pid=337187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=337192 suid=74 rport=53874 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998531.285:21330): pid=337187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=337192 suid=74 rport=53874 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998531.285:21331): pid=337187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=337192 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998531.286:21332): pid=337187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.224.90.50 addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998531.287:21333): pid=337187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=337187 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998531.287:21334): pid=337187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998538.186:21335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998538.327:21336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998546.181:21337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998546.301:21338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998559.187:21339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998559.363:21340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998561.181:21341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998561.493:21342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998566.996:21343): pid=338767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=338767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998567.088:21344): pid=338766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=338767 suid=74 rport=43114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998567.088:21345): pid=338766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=338767 suid=74 rport=43114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998567.656:21346): pid=338766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=338767 suid=74 rport=43114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998567.657:21347): pid=338766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=338767 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998567.657:21348): pid=338766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998567.658:21349): pid=338766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=338766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998567.658:21350): pid=338766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998569.182:21351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998569.323:21352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998577.183:21353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998577.337:21354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998590.182:21355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998590.619:21356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998592.181:21357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998592.379:21358): pid=340343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=340343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1780998592.492:21359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780998592.505:21360): pid=340342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=340343 suid=74 rport=43478 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998592.505:21361): pid=340342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=340343 suid=74 rport=43478 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998593.236:21362): pid=340342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=340343 suid=74 rport=43478 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998593.236:21363): pid=340342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=340343 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998593.237:21364): pid=340342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998593.237:21365): pid=340342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=340342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998593.237:21366): pid=340342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998597.927:21367): pid=340770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=340770 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998598.127:21368): pid=340769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=340770 suid=74 rport=38276 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998598.127:21369): pid=340769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=340770 suid=74 rport=38276 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998599.228:21370): pid=340769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=340770 suid=74 rport=38276 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998599.228:21371): pid=340769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=340770 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998599.228:21372): pid=340769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998599.229:21373): pid=340769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=340769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998599.229:21374): pid=340769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998600.180:21375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998600.295:21376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998608.183:21377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998608.310:21378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998621.198:21379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998621.360:21380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998623.181:21381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998623.464:21382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998631.182:21383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998631.316:21384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998635.878:21385): pid=342560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=342560 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998636.128:21386): pid=342559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=342560 suid=74 rport=37916 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998636.128:21387): pid=342559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=342560 suid=74 rport=37916 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998637.483:21388): pid=342559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=342560 suid=74 rport=37916 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998637.484:21389): pid=342559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=342560 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998637.484:21390): pid=342559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998637.485:21391): pid=342559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=342559 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998637.485:21392): pid=342559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998639.182:21393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998639.327:21394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998649.203:21395): pid=343464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=343464 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998649.450:21396): pid=343463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=343464 suid=74 rport=36832 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998649.450:21397): pid=343463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=343464 suid=74 rport=36832 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998650.792:21398): pid=343463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=343464 suid=74 rport=36832 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998650.792:21399): pid=343463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=343464 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998650.793:21400): pid=343463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998650.793:21401): pid=343463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=343463 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998650.793:21402): pid=343463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998652.182:21403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998652.347:21404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998654.194:21405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998654.517:21406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998662.181:21407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998662.315:21408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998670.189:21409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998670.315:21410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998670.373:21411): pid=344479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=344479 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998670.465:21412): pid=344478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=344479 suid=74 rport=54120 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998670.465:21413): pid=344478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=344479 suid=74 rport=54120 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998671.034:21414): pid=344478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=344479 suid=74 rport=54120 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998671.034:21415): pid=344478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=344479 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998671.035:21416): pid=344478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998671.035:21417): pid=344478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=344478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998671.035:21418): pid=344478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998683.182:21419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998683.370:21420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998685.182:21421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998685.496:21422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998693.182:21423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998693.296:21424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998701.181:21425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998701.292:21426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998714.182:21427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998714.361:21428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998716.182:21429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998716.508:21430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998724.184:21431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998724.264:21432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998729.186:21433): pid=347665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=347665 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998729.384:21434): pid=347664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=347665 suid=74 rport=59434 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998729.384:21435): pid=347664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=347665 suid=74 rport=59434 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998730.281:21436): pid=347728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=347728 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998730.405:21437): pid=347727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=347728 suid=74 rport=47312 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998730.405:21438): pid=347727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=347728 suid=74 rport=47312 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998730.487:21439): pid=347664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347665 suid=74 rport=59434 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998730.488:21440): pid=347664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=347665 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998730.488:21441): pid=347664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998730.488:21442): pid=347664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=347664 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998730.488:21443): pid=347664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998731.130:21444): pid=347727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=347728 suid=74 rport=47312 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998731.130:21445): pid=347727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=347728 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998731.131:21446): pid=347727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998731.131:21447): pid=347727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=347727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998731.131:21448): pid=347727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998732.188:21449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998732.327:21450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998740.327:21451): pid=348260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=348260 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998740.399:21452): pid=348259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=348260 suid=74 rport=45918 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998740.399:21453): pid=348259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=348260 suid=74 rport=45918 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998740.857:21454): pid=348259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=348260 suid=74 rport=45918 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998740.858:21455): pid=348259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=348260 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998740.858:21456): pid=348259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.143.231.2 addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998740.859:21457): pid=348259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=348259 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998740.859:21458): pid=348259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998745.182:21459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998745.358:21460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998747.181:21461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998747.506:21462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998755.186:21463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998755.304:21464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998763.187:21465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998763.306:21466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998775.622:21467): pid=350034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=350034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998775.873:21468): pid=350032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=350034 suid=74 rport=41016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998775.873:21469): pid=350032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=350034 suid=74 rport=41016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780998776.186:21470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998776.371:21471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998776.770:21472): pid=350143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=350143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998776.861:21473): pid=350142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=350143 suid=74 rport=39866 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998776.862:21474): pid=350142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=350143 suid=74 rport=39866 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998777.262:21475): pid=350032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350034 suid=74 rport=41016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998777.263:21476): pid=350032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=350034 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998777.263:21477): pid=350032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998777.264:21478): pid=350032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=350032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998777.264:21479): pid=350032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998777.426:21480): pid=350142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350143 suid=74 rport=39866 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998777.426:21481): pid=350142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=350143 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998777.427:21482): pid=350142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998777.428:21483): pid=350142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=350142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998777.428:21484): pid=350142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998777.680:21485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998777.980:21486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998786.182:21487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998786.321:21488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998788.415:21489): pid=350653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=350653 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998788.659:21490): pid=350652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=350653 suid=74 rport=44160 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998788.659:21491): pid=350652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=350653 suid=74 rport=44160 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998789.993:21492): pid=350652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=350653 suid=74 rport=44160 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998789.994:21493): pid=350652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=350653 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998789.994:21494): pid=350652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998789.995:21495): pid=350652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=350652 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998789.995:21496): pid=350652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998794.185:21497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998794.302:21498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998807.182:21499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998807.371:21500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998808.181:21501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998808.481:21502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998817.187:21503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998817.297:21504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998825.181:21505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998825.284:21506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998838.182:21507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998838.362:21508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998839.180:21509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998839.463:21510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998848.181:21511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998848.326:21512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998856.182:21513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998856.315:21514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998857.040:21515): pid=354327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998857.166:21516): pid=354326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=354327 suid=74 rport=47250 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998857.166:21517): pid=354326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=354327 suid=74 rport=47250 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998857.902:21518): pid=354326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354327 suid=74 rport=47250 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998857.902:21519): pid=354326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354327 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998857.903:21520): pid=354326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=131.161.249.165 addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998857.904:21521): pid=354326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354326 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998857.904:21522): pid=354326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998857.910:21523): pid=354337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998858.109:21524): pid=354336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=354337 suid=74 rport=59570 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998858.109:21525): pid=354336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=354337 suid=74 rport=59570 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998859.209:21526): pid=354336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354337 suid=74 rport=59570 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998859.209:21527): pid=354336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354337 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998859.209:21528): pid=354336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998859.210:21529): pid=354336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998859.210:21530): pid=354336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998866.359:21531): pid=354829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998866.449:21532): pid=354828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=354829 suid=74 rport=65100 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998866.450:21533): pid=354828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=354829 suid=74 rport=65100 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998867.008:21534): pid=354828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354829 suid=74 rport=65100 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998867.008:21535): pid=354828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354829 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998867.009:21536): pid=354828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.152 addr=45.148.10.152 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998867.009:21537): pid=354828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354828 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998867.009:21538): pid=354828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.152 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998869.181:21539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998869.261:21540): pid=354882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1780998869.335:21541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780998869.389:21542): pid=354877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=354882 suid=74 rport=59988 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998869.390:21543): pid=354877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=354882 suid=74 rport=59988 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780998870.012:21544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998870.124:21545): pid=354877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=354882 suid=74 rport=59988 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998870.124:21546): pid=354877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354882 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998870.125:21547): pid=354877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.241.40.34 addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998870.126:21548): pid=354877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=354877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998870.126:21549): pid=354877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998870.315:21550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998879.181:21551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998879.309:21552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998881.763:21553): pid=355747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=355747 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998881.855:21554): pid=355746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=355747 suid=74 rport=48940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998881.855:21555): pid=355746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=355747 suid=74 rport=48940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998882.421:21556): pid=355746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=355747 suid=74 rport=48940 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998882.422:21557): pid=355746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=355747 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998882.422:21558): pid=355746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998882.423:21559): pid=355746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=355746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998882.423:21560): pid=355746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998887.181:21561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998887.302:21562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998898.197:21563): pid=356469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=356469 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998898.297:21564): pid=356468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=356469 suid=74 rport=43534 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998898.297:21565): pid=356468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=356469 suid=74 rport=43534 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998898.912:21566): pid=356468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=356469 suid=74 rport=43534 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998898.912:21567): pid=356468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=356469 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998898.912:21568): pid=356468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.224.90.50 addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998898.913:21569): pid=356468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=356468 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998898.913:21570): pid=356468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998900.182:21571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998900.348:21572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998900.370:21573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998900.637:21574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998910.186:21575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998910.298:21576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998915.923:21577): pid=357401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=357401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998916.177:21578): pid=357400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=357401 suid=74 rport=56384 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998916.177:21579): pid=357400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=357401 suid=74 rport=56384 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780998917.366:21580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998917.496:21581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998917.607:21582): pid=357400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357401 suid=74 rport=56384 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998917.607:21583): pid=357400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=357401 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998917.608:21584): pid=357400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998917.609:21585): pid=357400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=357400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998917.609:21586): pid=357400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998920.136:21587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998920.136:21588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998927.906:21589): pid=357946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=357946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998928.148:21590): pid=357945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=357946 suid=74 rport=42446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998928.149:21591): pid=357945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=357946 suid=74 rport=42446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998929.473:21592): pid=357945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=357946 suid=74 rport=42446 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998929.473:21593): pid=357945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=357946 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998929.474:21594): pid=357945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998929.474:21595): pid=357945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=357945 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998929.475:21596): pid=357945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998929.517:21597): pid=358013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=358013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998929.588:21598): pid=358012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=358013 suid=74 rport=45282 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998929.588:21599): pid=358012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=358013 suid=74 rport=45282 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998930.051:21600): pid=358012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=358013 suid=74 rport=45282 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998930.051:21601): pid=358012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=358013 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998930.051:21602): pid=358012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.143.231.2 addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998930.052:21603): pid=358012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=358012 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998930.052:21604): pid=358012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998931.195:21605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998931.196:21606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998931.401:21607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998931.490:21608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998941.181:21609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998941.297:21610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998948.181:21611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998948.326:21612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998959.207:21613): pid=359741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=359741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780998962.188:21614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998962.191:21615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998962.387:21616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998962.491:21617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998972.182:21618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998972.318:21619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998979.047:21620): pid=360684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=360684 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780998979.180:21621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998979.182:21622): pid=360687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=360687 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1780998979.288:21623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780998979.294:21624): pid=360685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=360687 suid=74 rport=37350 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=95.215.0.144 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998979.294:21625): pid=360685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=360687 suid=74 rport=37350 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=95.215.0.144 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998979.417:21626): pid=360685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=360685 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998979.417:21627): pid=360685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=95.215.0.144 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998989.336:21628): pid=361224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=361224 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780998989.430:21629): pid=361223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=361224 suid=74 rport=44448 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998989.430:21630): pid=361223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=361224 suid=74 rport=44448 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998989.805:21631): pid=361226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=361226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780998990.000:21632): pid=361223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=361224 suid=74 rport=44448 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998990.001:21633): pid=361223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=361224 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998990.001:21634): pid=361223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998990.002:21635): pid=361223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=361223 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998990.002:21636): pid=361223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780998990.004:21637): pid=361225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=361226 suid=74 rport=33442 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780998990.004:21638): pid=361225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=361226 suid=74 rport=33442 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998991.113:21639): pid=361225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=361226 suid=74 rport=33442 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780998991.113:21640): pid=361225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=361226 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780998991.114:21641): pid=361225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780998991.115:21642): pid=361225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=361225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780998991.115:21643): pid=361225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998993.193:21644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780998993.197:21645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998993.420:21646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780998993.480:21647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999003.183:21648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999003.306:21649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999007.190:21650): pid=362291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=362291 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999007.290:21651): pid=362290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=362291 suid=74 rport=39472 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999007.290:21652): pid=362290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=362291 suid=74 rport=39472 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999007.895:21653): pid=362357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=362357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1780999007.898:21654): pid=362290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=362291 suid=74 rport=39472 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999007.899:21655): pid=362290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=362291 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999007.899:21656): pid=362290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.224.90.50 addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999007.900:21657): pid=362290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=362290 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999007.900:21658): pid=362290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780999008.019:21659): pid=362356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=362357 suid=74 rport=50460 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999008.020:21660): pid=362356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=362357 suid=74 rport=50460 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999008.759:21661): pid=362356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=362357 suid=74 rport=50460 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999008.759:21662): pid=362356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=362357 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999008.760:21663): pid=362356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999008.761:21664): pid=362356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=362356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999008.761:21665): pid=362356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999009.809:21666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999009.934:21667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999011.814:21668): pid=362725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=362725 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999011.943:21669): pid=362724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=362725 suid=74 rport=44148 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999011.943:21670): pid=362724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=362725 suid=74 rport=44148 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999012.683:21671): pid=362724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=362725 suid=74 rport=44148 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999012.683:21672): pid=362724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=362725 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999012.684:21673): pid=362724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=131.161.249.165 addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999012.685:21674): pid=362724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=362724 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999012.685:21675): pid=362724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999024.182:21676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999024.185:21677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999024.368:21678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999024.588:21679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999034.183:21680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999034.300:21681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999040.182:21682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999040.324:21683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999055.185:21684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999055.189:21685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999055.400:21686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999055.481:21687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999060.949:21688): pid=365288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=365288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999061.197:21689): pid=365287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=365288 suid=74 rport=33932 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999061.197:21690): pid=365287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=365288 suid=74 rport=33932 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999062.547:21691): pid=365287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=365288 suid=74 rport=33932 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999062.548:21692): pid=365287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=365288 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999062.548:21693): pid=365287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999062.549:21694): pid=365287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=365287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999062.549:21695): pid=365287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999065.186:21696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999065.325:21697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999068.578:21698): pid=365457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=365457 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999068.820:21699): pid=365456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=365457 suid=74 rport=50662 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999068.820:21700): pid=365456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=365457 suid=74 rport=50662 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999070.141:21701): pid=365456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=365457 suid=74 rport=50662 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999070.142:21702): pid=365456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=365457 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999070.143:21703): pid=365456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999070.143:21704): pid=365456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=365456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999070.143:21705): pid=365456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999070.352:21706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999070.595:21707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999086.181:21708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999086.184:21709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999086.416:21710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999086.477:21711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999093.390:21712): pid=366919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=366919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999093.483:21713): pid=366918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=366919 suid=74 rport=50096 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999093.483:21714): pid=366918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=366919 suid=74 rport=50096 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999094.047:21715): pid=366918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=366919 suid=74 rport=50096 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999094.047:21716): pid=366918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=366919 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999094.047:21717): pid=366918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999094.048:21718): pid=366918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=366918 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999094.048:21719): pid=366918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999096.182:21720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999096.319:21721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999101.182:21722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999101.317:21723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999111.859:21724): pid=367977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=367977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999111.960:21725): pid=367976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=367977 suid=74 rport=42896 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999111.961:21726): pid=367976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=367977 suid=74 rport=42896 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999112.578:21727): pid=367976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=367977 suid=74 rport=42896 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999112.579:21728): pid=367976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=367977 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999112.580:21729): pid=367976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.224.90.50 addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999112.580:21730): pid=367976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=367976 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999112.580:21731): pid=367976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999117.182:21732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999117.185:21733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999117.358:21734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999117.539:21735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999121.798:21736): pid=368386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=368386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999122.011:21737): pid=368385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=368386 suid=74 rport=41978 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999122.011:21738): pid=368385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=368386 suid=74 rport=41978 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999123.179:21739): pid=368385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=368386 suid=74 rport=41978 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999123.179:21740): pid=368385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=368386 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999123.180:21741): pid=368385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999123.180:21742): pid=368385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=368385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999123.180:21743): pid=368385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999127.182:21744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999127.304:21745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999132.182:21746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999132.299:21747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999135.491:21748): pid=369207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=369207 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999135.617:21749): pid=369206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=369207 suid=74 rport=38394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999135.617:21750): pid=369206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=369207 suid=74 rport=38394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999136.362:21751): pid=369206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=369207 suid=74 rport=38394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999136.362:21752): pid=369206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=369207 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999136.363:21753): pid=369206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=131.161.249.165 addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999136.363:21754): pid=369206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=369206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999136.363:21755): pid=369206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999148.185:21756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999148.188:21757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999148.376:21758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999148.539:21759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999149.800:21760): pid=369942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=369942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999149.801:21761): pid=369941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=369942 suid=74 rport=43852 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999149.802:21762): pid=369941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=369942 suid=74 rport=43852 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780999149.873:21763): pid=369941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780999149.880:21764): pid=369941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780999149.909:21765): pid=369941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999149.909:21766): pid=369941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780999149.939:21767): pid=369941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999149.940:21768): pid=369941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=369942 suid=74 rport=43852 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780999149.942:21769): pid=369941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780999149.942:21770): pid=369941 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=159 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780999149.942:21770): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff51000530 a2=4 a3=3e8 items=0 ppid=37599 pid=369941 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=159 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780999149.942:21770): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780999149.944:21771): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1780999150.006:21772): pid=369944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1780999150.006:21773): pid=369944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1780999150.007:21774): pid=369944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780999150.007:21775): pid=369944 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=160 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780999150.007:21775): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd323a9ea0 a2=4 a3=3e8 items=0 ppid=1 pid=369944 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=160 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780999150.007:21775): proctitle="(systemd)"
type=USER_START msg=audit(1780999150.008:21776): pid=369944 uid=0 auid=1000 ses=160 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1780999150.123:21777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780999150.146:21778): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999150.148:21779): pid=369960 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=369960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1780999150.149:21780): pid=369960 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780999150.193:21781): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780999150.193:21782): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999150.194:21783): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=369962 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1780999150.258:21784): pid=369978 uid=1000 auid=1000 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780999150.258:21785): pid=369978 uid=1000 auid=1000 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6375686A786F61667469706767646C616D706D6B796963696566666473616466203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780999150.259:21786): pid=369978 uid=1000 auid=1000 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780999150.263:21787): pid=369978 uid=1000 auid=1000 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999150.611:21788): pid=369999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=369999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999150.737:21789): pid=369998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=369999 suid=74 rport=47142 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999150.738:21790): pid=369998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=369999 suid=74 rport=47142 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_END msg=audit(1780999151.128:21791): pid=369978 uid=1000 auid=1000 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780999151.128:21792): pid=369978 uid=1000 auid=1000 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780999151.132:21793): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780999151.132:21794): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999151.470:21795): pid=369998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=369999 suid=74 rport=47142 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999151.470:21796): pid=369998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=369999 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999151.471:21797): pid=369998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999151.471:21798): pid=369998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=369998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999151.471:21799): pid=369998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999158.182:21800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999158.339:21801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999163.179:21802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999163.262:21803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999176.993:21804): pid=370859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=370859 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780999179.184:21805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999179.187:21806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999179.361:21807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999179.569:21808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999189.184:21809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999189.290:21810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999194.181:21811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999194.328:21812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999194.645:21813): pid=372423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=372423 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999194.737:21814): pid=372413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=372423 suid=74 rport=40618 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999194.737:21815): pid=372413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=372423 suid=74 rport=40618 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999195.308:21816): pid=372413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=372423 suid=74 rport=40618 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999195.308:21817): pid=372413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=372423 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999195.308:21818): pid=372413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999195.309:21819): pid=372413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=372413 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999195.309:21820): pid=372413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780999201.992:21821): pid=372857 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=CRED_ACQ msg=audit(1780999201.992:21822): pid=372857 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1780999201.993:21823): pid=372857 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1780999201.994:21824): pid=372857 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780999203.066:21825): pid=372911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=372911 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999203.314:21826): pid=372910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=372911 suid=74 rport=46672 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999203.315:21827): pid=372910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=372911 suid=74 rport=46672 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999204.973:21828): pid=372910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=372911 suid=74 rport=46672 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999204.973:21829): pid=372910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=372911 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999204.974:21830): pid=372910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999204.975:21831): pid=372910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=372910 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999204.975:21832): pid=372910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999207.879:21833): pid=373008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=373008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999208.124:21834): pid=373006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=373008 suid=74 rport=42512 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999208.124:21835): pid=373006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=373008 suid=74 rport=42512 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999209.452:21836): pid=373006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=373008 suid=74 rport=42512 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999209.452:21837): pid=373006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=373008 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999209.453:21838): pid=373006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999209.453:21839): pid=373006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=373006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999209.454:21840): pid=373006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999209.475:21841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999209.630:21842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999209.633:21843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999209.925:21844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999210.246:21845): pid=373096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=373096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999210.347:21846): pid=373095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=373096 suid=74 rport=44196 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999210.347:21847): pid=373095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=373096 suid=74 rport=44196 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999210.962:21848): pid=373095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=373096 suid=74 rport=44196 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999210.962:21849): pid=373095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=373096 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999210.962:21850): pid=373095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.224.90.50 addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999210.963:21851): pid=373095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=373095 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999210.963:21852): pid=373095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999211.167:21853): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=369960 suid=1000 rport=43852 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999211.168:21854): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=369960 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780999211.171:21855): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780999211.171:21856): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999211.172:21857): pid=369941 uid=0 auid=1000 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=369941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1780999220.182:21858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999220.313:21859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999221.435:21860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999221.778:21861): pid=373808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=373808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999221.885:21862): pid=373774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=373808 suid=74 rport=34864 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999221.885:21863): pid=373774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=373808 suid=74 rport=34864 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999222.524:21864): pid=373774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=373808 suid=74 rport=34864 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999222.524:21865): pid=373774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=373808 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999222.525:21866): pid=373774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.227.254.170 addr=45.227.254.170 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999222.526:21867): pid=373774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=373774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999222.526:21868): pid=373774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.227.254.170 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999225.209:21869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999225.335:21870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999240.190:21871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999240.194:21872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999240.340:21873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999240.531:21874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999250.434:21875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999250.549:21876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999252.276:21877): pid=375553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=375553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999252.477:21878): pid=375548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=375553 suid=74 rport=35990 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999252.478:21879): pid=375548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=375553 suid=74 rport=35990 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999253.590:21880): pid=375548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=375553 suid=74 rport=35990 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999253.590:21881): pid=375548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=375553 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999253.591:21882): pid=375548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999253.592:21883): pid=375548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=375548 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999253.592:21884): pid=375548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999256.182:21885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999256.399:21886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999270.687:21887): pid=376319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=376319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999270.812:21888): pid=376318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=376319 suid=74 rport=41938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999270.812:21889): pid=376318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=376319 suid=74 rport=41938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780999271.189:21890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999271.192:21891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999271.411:21892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999271.496:21893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999271.546:21894): pid=376318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=376319 suid=74 rport=41938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999271.546:21895): pid=376318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=376319 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999271.547:21896): pid=376318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=131.161.249.165 addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999271.548:21897): pid=376318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=376318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999271.548:21898): pid=376318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999281.185:21899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999281.336:21900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999287.047:21901): pid=377234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=377234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999287.176:21902): pid=377233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=377234 suid=74 rport=48560 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999287.177:21903): pid=377233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=377234 suid=74 rport=48560 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780999287.180:21904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999287.307:21905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999287.916:21906): pid=377233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=377234 suid=74 rport=48560 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999287.917:21907): pid=377233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=377234 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999287.917:21908): pid=377233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.241.40.34 addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999287.918:21909): pid=377233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=377233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999287.918:21910): pid=377233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1780999291.021:21911): pid=372857 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1780999291.021:21912): pid=372857 uid=0 auid=1002 ses=13 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1780999299.240:21913): pid=377790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=377790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999299.332:21914): pid=377789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=377790 suid=74 rport=44430 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999299.333:21915): pid=377789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=377790 suid=74 rport=44430 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999299.901:21916): pid=377789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=377790 suid=74 rport=44430 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999299.901:21917): pid=377789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=377790 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999299.902:21918): pid=377789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999299.903:21919): pid=377789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=377789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999299.903:21920): pid=377789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999302.184:21921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999302.187:21922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999302.381:21923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999302.472:21924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999304.775:21925): pid=378281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=378281 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999304.847:21926): pid=378280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=378281 suid=74 rport=45484 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999304.847:21927): pid=378280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=378281 suid=74 rport=45484 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999305.304:21928): pid=378280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=378281 suid=74 rport=45484 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999305.304:21929): pid=378280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=378281 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999305.305:21930): pid=378280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.143.231.2 addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999305.305:21931): pid=378280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=378280 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999305.305:21932): pid=378280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999312.182:21933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999312.286:21934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999317.555:21935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999317.665:21936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999324.702:21937): pid=379314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=379314 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999324.802:21938): pid=379306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=379314 suid=74 rport=36532 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999324.803:21939): pid=379306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=379314 suid=74 rport=36532 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999325.416:21940): pid=379306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=379314 suid=74 rport=36532 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999325.417:21941): pid=379306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=379314 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999325.418:21942): pid=379306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.224.90.50 addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999325.419:21943): pid=379306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=379306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999325.419:21944): pid=379306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999333.182:21945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999333.184:21946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999333.352:21947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999333.552:21948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999343.213:21949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999343.349:21950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999348.182:21951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999348.295:21952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999349.353:21953): pid=380542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=380542 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999349.600:21954): pid=380534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=380542 suid=74 rport=54448 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999349.600:21955): pid=380534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=380542 suid=74 rport=54448 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999350.942:21956): pid=380534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=380542 suid=74 rport=54448 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999350.942:21957): pid=380534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=380542 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999350.943:21958): pid=380534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999350.944:21959): pid=380534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=380534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999350.944:21960): pid=380534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999351.780:21961): pid=380561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=380561 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999352.025:21962): pid=380560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=380561 suid=74 rport=34772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999352.025:21963): pid=380560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=380561 suid=74 rport=34772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999353.361:21964): pid=380560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=380561 suid=74 rport=34772 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999353.361:21965): pid=380560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=380561 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999353.362:21966): pid=380560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999353.362:21967): pid=380560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=380560 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999353.362:21968): pid=380560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999364.181:21969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999364.183:21970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999364.388:21971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999364.562:21972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999374.179:21973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999374.290:21974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999379.184:21975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999379.280:21976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999389.610:21977): pid=382673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=382673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999389.809:21978): pid=382672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=382673 suid=74 rport=48686 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999389.809:21979): pid=382672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=382673 suid=74 rport=48686 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999390.900:21980): pid=382672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=382673 suid=74 rport=48686 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999390.900:21981): pid=382672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=382673 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999390.901:21982): pid=382672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999390.901:21983): pid=382672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=382672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999390.901:21984): pid=382672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999395.188:21985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999395.192:21986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999395.403:21987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999395.473:21988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999397.871:21989): pid=383244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=383244 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999398.000:21990): pid=383243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=383244 suid=74 rport=52776 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999398.001:21991): pid=383243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=383244 suid=74 rport=52776 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999398.706:21992): pid=383243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=383244 suid=74 rport=52776 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999398.706:21993): pid=383243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=383244 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999398.707:21994): pid=383243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=131.161.249.165 addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999398.707:21995): pid=383243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=383243 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999398.707:21996): pid=383243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999405.186:21997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999405.325:21998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999405.337:21999): pid=383528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=383528 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999405.431:22000): pid=383527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=383528 suid=74 rport=39394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999405.431:22001): pid=383527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=383528 suid=74 rport=39394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999406.005:22002): pid=383527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=383528 suid=74 rport=39394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999406.006:22003): pid=383527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=383528 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999406.006:22004): pid=383527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999406.006:22005): pid=383527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=383527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999406.007:22006): pid=383527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999410.181:22007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999410.316:22008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999424.948:22009): pid=384576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=384576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999425.074:22010): pid=384575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=384576 suid=74 rport=37124 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999425.074:22011): pid=384575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=384576 suid=74 rport=37124 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780999425.698:22012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999425.701:22013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999425.808:22014): pid=384575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=384576 suid=74 rport=37124 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999425.808:22015): pid=384575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=384576 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999425.809:22016): pid=384575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.241.40.34 addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999425.810:22017): pid=384575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=384575 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999425.810:22018): pid=384575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999425.908:22019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999426.085:22020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999436.181:22021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999436.307:22022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999437.072:22023): pid=385334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=385334 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999437.171:22024): pid=385333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=385334 suid=74 rport=43366 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999437.171:22025): pid=385333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=385334 suid=74 rport=43366 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999437.782:22026): pid=385333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=385334 suid=74 rport=43366 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999437.782:22027): pid=385333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=385334 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999437.783:22028): pid=385333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.224.90.50 addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999437.784:22029): pid=385333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=385333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999437.784:22030): pid=385333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999441.182:22031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999441.325:22032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999456.182:22033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999456.185:22034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999456.343:22035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999456.446:22036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999467.180:22037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999467.320:22038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999472.182:22039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999472.292:22040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999487.183:22041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999487.187:22042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999487.327:22043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999487.559:22044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999493.949:22045): pid=388356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=388356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999494.198:22046): pid=388341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=388356 suid=74 rport=37610 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999494.198:22047): pid=388341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=388356 suid=74 rport=37610 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999495.550:22048): pid=388341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=388356 suid=74 rport=37610 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999495.550:22049): pid=388341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=388356 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999495.551:22050): pid=388341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999495.552:22051): pid=388341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=388341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999495.552:22052): pid=388341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999496.354:22053): pid=388467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=388467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999496.600:22054): pid=388466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=388467 suid=74 rport=46182 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999496.600:22055): pid=388466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=388467 suid=74 rport=46182 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999497.937:22056): pid=388466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=388467 suid=74 rport=46182 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999497.937:22057): pid=388466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=388467 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999497.938:22058): pid=388466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999497.938:22059): pid=388466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=388466 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999497.938:22060): pid=388466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999497.950:22061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999498.081:22062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999503.181:22063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999503.309:22064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999507.617:22065): pid=388967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=388967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999507.711:22066): pid=388966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=388967 suid=74 rport=41942 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999507.711:22067): pid=388966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=388967 suid=74 rport=41942 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999508.281:22068): pid=388966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=388967 suid=74 rport=41942 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999508.282:22069): pid=388966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=388967 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999508.282:22070): pid=388966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999508.283:22071): pid=388966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=388966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999508.283:22072): pid=388966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999515.054:22073): pid=389462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=389462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999515.180:22074): pid=389461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=389462 suid=74 rport=55398 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999515.180:22075): pid=389461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=389462 suid=74 rport=55398 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999515.919:22076): pid=389461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=389462 suid=74 rport=55398 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999515.920:22077): pid=389461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=389462 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999515.920:22078): pid=389461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=131.161.249.165 addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999515.921:22079): pid=389461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=389461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999515.921:22080): pid=389461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999518.183:22081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999518.186:22082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999518.308:22083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999518.415:22084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999522.764:22085): pid=389754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=389754 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999522.961:22086): pid=389753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=389754 suid=74 rport=44094 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999522.961:22087): pid=389753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=389754 suid=74 rport=44094 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999524.060:22088): pid=389753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=389754 suid=74 rport=44094 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999524.061:22089): pid=389753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=389754 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999524.061:22090): pid=389753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999524.062:22091): pid=389753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=389753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999524.062:22092): pid=389753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999528.192:22093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999528.325:22094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999534.185:22095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999534.341:22096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999539.456:22097): pid=390695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=390695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999539.558:22098): pid=390694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=390695 suid=74 rport=45828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999539.558:22099): pid=390694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=390695 suid=74 rport=45828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999540.171:22100): pid=390694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=390695 suid=74 rport=45828 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999540.171:22101): pid=390694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=390695 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999540.172:22102): pid=390694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.224.90.50 addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999540.172:22103): pid=390694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=390694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999540.172:22104): pid=390694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999549.184:22105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999549.188:22106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999549.385:22107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999549.548:22108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999559.182:22109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999559.283:22110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999562.765:22111): pid=391972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=391972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999562.890:22112): pid=391970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=391972 suid=74 rport=56422 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999562.891:22113): pid=391970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=391972 suid=74 rport=56422 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999563.624:22114): pid=391970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=391972 suid=74 rport=56422 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999563.625:22115): pid=391970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=391972 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999563.626:22116): pid=391970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999563.627:22117): pid=391970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=391970 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999563.627:22118): pid=391970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999565.180:22119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999565.321:22120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999580.188:22121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999580.191:22122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999580.380:22123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999580.582:22124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999590.181:22125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999590.321:22126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999596.182:22127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999596.316:22128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999611.101:22129): pid=394338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=394338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780999611.184:22130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999611.187:22131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780999611.193:22132): pid=394337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=394338 suid=74 rport=42488 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999611.194:22133): pid=394337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=394338 suid=74 rport=42488 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1780999611.347:22134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999611.500:22135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999611.764:22136): pid=394337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=394338 suid=74 rport=42488 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999611.764:22137): pid=394337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=394338 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999611.765:22138): pid=394337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999611.766:22139): pid=394337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=394337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999611.766:22140): pid=394337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999621.181:22141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999621.328:22142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999627.182:22143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999627.322:22144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999633.545:22145): pid=395594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=395594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999633.673:22146): pid=395593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=395594 suid=74 rport=49638 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999633.673:22147): pid=395593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=395594 suid=74 rport=49638 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999634.413:22148): pid=395593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=395594 suid=74 rport=49638 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999634.413:22149): pid=395593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=395594 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999634.413:22150): pid=395593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=131.161.249.165 addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999634.414:22151): pid=395593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=395593 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999634.414:22152): pid=395593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999635.591:22153): pid=395819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=395819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999635.837:22154): pid=395818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=395819 suid=74 rport=59774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999635.837:22155): pid=395818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=395819 suid=74 rport=59774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999637.173:22156): pid=395818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=395819 suid=74 rport=59774 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999637.174:22157): pid=395818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=395819 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999637.174:22158): pid=395818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999637.174:22159): pid=395818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=395818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999637.175:22160): pid=395818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999638.008:22161): pid=395894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=395894 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999638.257:22162): pid=395893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=395894 suid=74 rport=41168 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999638.257:22163): pid=395893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=395894 suid=74 rport=41168 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999639.704:22164): pid=395893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=395894 suid=74 rport=41168 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999639.704:22165): pid=395893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=395894 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999639.705:22166): pid=395893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999639.706:22167): pid=395893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=395893 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999639.706:22168): pid=395893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999642.184:22169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999642.187:22170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999642.420:22171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999642.478:22172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999643.233:22173): pid=396186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=396186 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999643.334:22174): pid=396185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=396186 suid=74 rport=46816 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999643.334:22175): pid=396185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=396186 suid=74 rport=46816 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999643.947:22176): pid=396185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=396186 suid=74 rport=46816 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999643.948:22177): pid=396185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=396186 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999643.948:22178): pid=396185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.224.90.50 addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999643.949:22179): pid=396185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=396185 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999643.949:22180): pid=396185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999652.132:22181): pid=396658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=396658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1780999652.185:22182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999652.303:22183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1780999652.318:22184): pid=396657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=396658 suid=74 rport=48434 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999652.318:22185): pid=396657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=396658 suid=74 rport=48434 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999653.356:22186): pid=396657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=396658 suid=74 rport=48434 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999653.356:22187): pid=396657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=396658 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999653.357:22188): pid=396657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999653.358:22189): pid=396657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=396657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999653.358:22190): pid=396657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999658.187:22191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999658.327:22192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999673.197:22193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999673.200:22194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999673.449:22195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999673.469:22196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999683.183:22197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999683.328:22198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999684.575:22199): pid=398342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=398342 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999684.645:22200): pid=398341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=398342 suid=74 rport=50624 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999684.645:22201): pid=398341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=398342 suid=74 rport=50624 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999685.107:22202): pid=398341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=398342 suid=74 rport=50624 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999685.107:22203): pid=398341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=398342 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999685.107:22204): pid=398341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.143.231.2 addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999685.108:22205): pid=398341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=398341 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999685.108:22206): pid=398341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.143.231.2 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999689.181:22207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999689.292:22208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999701.470:22209): pid=399198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=399198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999701.594:22210): pid=399197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=399198 suid=74 rport=36922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999701.595:22211): pid=399197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=399198 suid=74 rport=36922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999702.318:22212): pid=399197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=399198 suid=74 rport=36922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999702.319:22213): pid=399197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=399198 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999702.319:22214): pid=399197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.241.40.34 addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999702.320:22215): pid=399197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=399197 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999702.320:22216): pid=399197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=154.241.40.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999704.190:22217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999704.192:22218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999704.406:22219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999704.468:22220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999714.181:22221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999714.326:22222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999719.265:22223): pid=400242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=400242 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999719.357:22224): pid=400241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=400242 suid=74 rport=53746 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999719.357:22225): pid=400241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=400242 suid=74 rport=53746 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780999719.839:22226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999719.928:22227): pid=400241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=400242 suid=74 rport=53746 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999719.929:22228): pid=400241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=400242 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999719.929:22229): pid=400241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999719.930:22230): pid=400241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=400241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999719.930:22231): pid=400241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999719.966:22232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999735.186:22233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999735.190:22234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999735.411:22235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999735.537:22236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999745.186:22237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999745.290:22238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999750.182:22239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999750.329:22240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999756.103:22241): pid=402360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=402360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999756.206:22242): pid=402359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=402360 suid=74 rport=51746 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999756.206:22243): pid=402359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=402360 suid=74 rport=51746 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999756.818:22244): pid=402359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=402360 suid=74 rport=51746 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999756.818:22245): pid=402359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=402360 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999756.819:22246): pid=402359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=91.224.90.50 addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999756.820:22247): pid=402359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=402359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999756.820:22248): pid=402359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=91.224.90.50 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999758.051:22249): pid=402380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=402380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999758.178:22250): pid=402379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=402380 suid=74 rport=37472 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999758.178:22251): pid=402379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=402380 suid=74 rport=37472 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999758.918:22252): pid=402379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=402380 suid=74 rport=37472 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999758.918:22253): pid=402379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=402380 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999758.919:22254): pid=402379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=131.161.249.165 addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999758.920:22255): pid=402379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=402379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999758.920:22256): pid=402379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=131.161.249.165 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999766.183:22257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999766.186:22258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999766.375:22259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999766.533:22260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999776.186:22261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999776.335:22262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999779.186:22263): pid=403327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=403327 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999779.431:22264): pid=403326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=403327 suid=74 rport=59580 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999779.431:22265): pid=403326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=403327 suid=74 rport=59580 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780999780.538:22266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999780.647:22267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999780.767:22268): pid=403326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=403327 suid=74 rport=59580 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999780.767:22269): pid=403326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=403327 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999780.768:22270): pid=403326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.98.176.164 addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999780.769:22271): pid=403326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=403326 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999780.769:22272): pid=403326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.98.176.164 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999783.400:22273): pid=403609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=403609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999783.654:22274): pid=403608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=403609 suid=74 rport=55938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999783.654:22275): pid=403608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=403609 suid=74 rport=55938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999785.030:22276): pid=403608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=403609 suid=74 rport=55938 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999785.031:22277): pid=403608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=403609 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999785.031:22278): pid=403608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.119.212.99 addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999785.032:22279): pid=403608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=403608 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999785.032:22280): pid=403608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.119.212.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999786.537:22281): pid=403842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=403842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999786.735:22282): pid=403841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=403842 suid=74 rport=53844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999786.736:22283): pid=403841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=403842 suid=74 rport=53844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999787.837:22284): pid=403841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=403842 suid=74 rport=53844 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999787.837:22285): pid=403841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=403842 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999787.838:22286): pid=403841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=135.235.138.43 addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999787.839:22287): pid=403841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=403841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999787.839:22288): pid=403841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=135.235.138.43 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999797.195:22289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999797.198:22290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999797.369:22291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999797.567:22292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999807.196:22293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999807.310:22294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999811.185:22295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999811.297:22296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999826.741:22297): pid=405971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=405971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999826.832:22298): pid=405970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=405971 suid=74 rport=56394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999826.832:22299): pid=405970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=405971 suid=74 rport=56394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999827.400:22300): pid=405970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=405971 suid=74 rport=56394 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999827.400:22301): pid=405970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=405971 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999827.401:22302): pid=405970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.65.16.176 addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999827.401:22303): pid=405970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=405970 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999827.401:22304): pid=405970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.65.16.176 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999827.417:22305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1780999827.585:22306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999827.612:22307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1d93f1189f162531ec57b529774ec479e6bfa7b08118bf2f0c40fd95f23b4d96 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999827.879:22308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cf8a9c603ff355784c0c8d13f6fb66271d67360060dea1b7365a31e7c67ae6a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999830.243:22309): pid=406074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=406074 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999830.244:22310): pid=406073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=406074 suid=74 rport=54500 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999830.244:22311): pid=406073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=406074 suid=74 rport=54500 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780999830.318:22312): pid=406073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780999830.326:22313): pid=406073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780999830.393:22314): pid=406073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999830.393:22315): pid=406073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780999830.423:22316): pid=406073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999830.424:22317): pid=406073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=406074 suid=74 rport=54500 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780999830.426:22318): pid=406073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780999830.427:22319): pid=406073 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=161 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780999830.427:22319): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd85d0dd90 a2=4 a3=3e8 items=0 ppid=37599 pid=406073 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=161 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780999830.427:22319): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780999830.428:22320): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1780999830.484:22321): pid=406076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1780999830.484:22322): pid=406076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1780999830.485:22323): pid=406076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780999830.485:22324): pid=406076 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=162 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780999830.485:22324): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffd323a9ea0 a2=4 a3=3e8 items=0 ppid=1 pid=406076 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780999830.485:22324): proctitle="(systemd)"
type=USER_START msg=audit(1780999830.488:22325): pid=406076 uid=0 auid=1000 ses=162 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1780999830.650:22326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1780999830.673:22327): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999830.675:22328): pid=406092 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=406092 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1780999830.676:22329): pid=406092 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780999830.721:22330): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780999830.721:22331): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999830.723:22332): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=406093 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1780999830.792:22333): pid=406106 uid=1000 auid=1000 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780999830.793:22334): pid=406106 uid=1000 auid=1000 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647169766561677A7766776D73636C626373667A76726A647A6B736B65746467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780999830.793:22335): pid=406106 uid=1000 auid=1000 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780999830.798:22336): pid=406106 uid=1000 auid=1000 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780999831.279:22337): pid=406106 uid=1000 auid=1000 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1780999831.280:22338): pid=406106 uid=1000 auid=1000 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1780999831.282:22339): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1780999831.282:22340): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999835.360:22341): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=406092 suid=1000 rport=54500 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999835.360:22342): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=406092 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1780999835.362:22343): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1780999835.363:22344): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999835.364:22345): pid=406073 uid=0 auid=1000 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=406073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1780999838.182:22346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999838.307:22347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=c29523a8e3cc4d7cd13135085b8ddb44bce3bba846fe389e68bdd7fd98280eeb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999840.856:22348): pid=406650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=406650 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999840.981:22349): pid=406649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=406650 suid=74 rport=35812 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999840.981:22350): pid=406649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=406650 suid=74 rport=35812 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1780999841.596:22351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999841.715:22352): pid=406649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=406650 suid=74 rport=35812 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1780999841.715:22353): pid=406649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=406650 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1780999841.716:22354): pid=406649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=105.96.13.6 addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999841.717:22355): pid=406649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=406649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1780999841.717:22356): pid=406649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=105.96.13.6 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1780999841.741:22357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7d11043da4c8e9e3e9b5310b8886302bc694fe126a651898d3c7bfbc5aac330a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999844.745:22358): pid=406807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=406807 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1780999844.746:22359): pid=406806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=406807 suid=74 rport=48098 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1780999844.746:22360): pid=406806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=406807 suid=74 rport=48098 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1780999844.817:22361): pid=406806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780999844.823:22362): pid=406806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1780999844.856:22363): pid=406806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999844.856:22364): pid=406806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:8a:0f:83:43:19:e2:02:f9:41:3d:7e:a1:7e:bb:5e:2f:3b:66:bf:c8:7c:26:ad:3b:ed:a1:bc:96:bb:f0:f0:78 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1780999844.887:22365): pid=406806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1780999844.888:22366): pid=406806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=406807 suid=74 rport=48098 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1780999844.890:22367): pid=406806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1780999844.890:22368): pid=406806 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=163 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1780999844.890:22368): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd1039c800 a2=4 a3=3e8 items=0 ppid=37599 pid=406806 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=163 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1780999844.890:22368): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1780999844.892:22369): pid=406806 uid=0 auid=1000 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1780999844.926:22370): pid=406806 uid=0 auid=1000 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999844.928:22371): pid=406809 uid=0 auid=1000 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=406809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1780999844.930:22372): pid=406809 uid=0 auid=1000 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.129.56.84 addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1780999844.938:22373): pid=406806 uid=0 auid=1000 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1780999844.938:22374): pid=406806 uid=0 auid=1000 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.129.56.84 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1780999844.941:22375): pid=406806 uid=0 auid=1000 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:57:8d:8a:c0:9b:6e:f7:e7:b3:0d:ca:f1:80:aa:8e:57:6d:cc:49:46:31:f4:16:f0:dd:1b:4c:22:94:88:1d:1d direction=? spid=406810 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1780999845.011:22376): pid=406810 uid=1000 auid=1000 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1780999845.012:22377): pid=406810 uid=1000 auid=1000 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843497675202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1780999845.014:22378): pid=406810 uid=1000 auid=1000 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1780999845.020:22379): pid=406810 uid=1000 auid=1000 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"