[msgs:/var/log/messages]
May 17 09:32:12 Docker3 audit[1229658]: CRYPTO_KEY_USER pid=1229658 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=destroy kind=server fp=SHA256:62:b5:46:52:bb:9a:09:88:0e:b2:f4:d6:34:09:25:64:4d:c2:12:fc:a0:e6:fa:f3:4c:78:27:92:11:29:52:cd direction=? spid=1229658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=? res=success'
May 17 09:32:12 Docker3 audit[1229657]: CRYPTO_KEY_USER pid=1229657 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=destroy kind=server fp=SHA256:62:b5:46:52:bb:9a:09:88:0e:b2:f4:d6:34:09:25:64:4d:c2:12:fc:a0:e6:fa:f3:4c:78:27:92:11:29:52:cd direction=? spid=1229658 suid=74  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=? res=success'
May 17 09:32:12 Docker3 audit[1229657]: CRYPTO_KEY_USER pid=1229657 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=destroy kind=server fp=SHA256:62:b5:46:52:bb:9a:09:88:0e:b2:f4:d6:34:09:25:64:4d:c2:12:fc:a0:e6:fa:f3:4c:78:27:92:11:29:52:cd direction=? spid=1229657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=? res=success'
May 17 09:32:12 Docker3 audit[1229657]: USER_LOGIN pid=1229657 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=ssh res=failed'
May 17 09:37:12 Docker3 audit[1230355]: CRYPTO_KEY_USER pid=1230355 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=destroy kind=server fp=SHA256:62:b5:46:52:bb:9a:09:88:0e:b2:f4:d6:34:09:25:64:4d:c2:12:fc:a0:e6:fa:f3:4c:78:27:92:11:29:52:cd direction=? spid=1230355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=? res=success'
May 17 09:37:12 Docker3 audit[1230354]: CRYPTO_KEY_USER pid=1230354 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=destroy kind=server fp=SHA256:62:b5:46:52:bb:9a:09:88:0e:b2:f4:d6:34:09:25:64:4d:c2:12:fc:a0:e6:fa:f3:4c:78:27:92:11:29:52:cd direction=? spid=1230355 suid=74  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=? res=success'
May 17 09:37:12 Docker3 audit[1230354]: CRYPTO_KEY_USER pid=1230354 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=destroy kind=server fp=SHA256:62:b5:46:52:bb:9a:09:88:0e:b2:f4:d6:34:09:25:64:4d:c2:12:fc:a0:e6:fa:f3:4c:78:27:92:11:29:52:cd direction=? spid=1230354 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=? res=success'
May 17 09:37:12 Docker3 audit[1230354]: USER_LOGIN pid=1230354 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=ssh res=failed'
<...CURRENT...>
May 17 09:42:12 Docker3 audit[1231047]: CRYPTO_KEY_USER pid=1231047 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=destroy kind=server fp=SHA256:62:b5:46:52:bb:9a:09:88:0e:b2:f4:d6:34:09:25:64:4d:c2:12:fc:a0:e6:fa:f3:4c:78:27:92:11:29:52:cd direction=? spid=1231047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=? res=success'
May 17 09:42:12 Docker3 audit[1231046]: CRYPTO_KEY_USER pid=1231046 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=destroy kind=server fp=SHA256:62:b5:46:52:bb:9a:09:88:0e:b2:f4:d6:34:09:25:64:4d:c2:12:fc:a0:e6:fa:f3:4c:78:27:92:11:29:52:cd direction=? spid=1231047 suid=74  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=? res=success'
May 17 09:42:12 Docker3 audit[1231046]: CRYPTO_KEY_USER pid=1231046 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=destroy kind=server fp=SHA256:62:b5:46:52:bb:9a:09:88:0e:b2:f4:d6:34:09:25:64:4d:c2:12:fc:a0:e6:fa:f3:4c:78:27:92:11:29:52:cd direction=? spid=1231046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=? res=success'
May 17 09:42:12 Docker3 audit[1231046]: USER_LOGIN pid=1231046 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=192.168.1.41 terminal=ssh res=failed'