hange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:48:25 angussyd sshguard[69778]: Attack from "218.92.0.181" on service 100 with danger 10. May 29 04:48:47 angussyd sshd[6500]: Unable to negotiate with 218.92.0.204 port 19965: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:49:44 angussyd sshd[32153]: Unable to negotiate with 218.92.0.204 port 54520: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:51:56 angussyd sshd[80347]: Unable to negotiate with 218.92.0.204 port 53247: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:53:04 angussyd sshd[6547]: Unable to negotiate with 218.92.0.204 port 43186: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:54:14 angussyd sshd[31771]: Unable to negotiate with 218.92.0.204 port 53893: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:55:15 angussyd sshd[58159]: Unable to negotiate with 218.92.0.204 port 37559: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:56:15 angussyd sshd[83888]: Unable to negotiate with 218.92.0.204 port 34869: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:57:06 angussyd sshd[8749]: user www login class [preauth] May 29 04:57:06 angussyd sshd[8749]: Received disconnect from 178.128.81.125 port 21512:11: Normal Shutdown, Thank you for playing [preauth] May 29 04:57:06 angussyd sshd[8749]: Disconnected from authenticating user www 178.128.81.125 port 21512 [preauth] May 29 04:57:06 angussyd sshguard[69778]: Attack from "178.128.81.125" on service 100 with danger 10. May 29 04:57:25 angussyd sshd[9236]: Unable to negotiate with 218.92.0.204 port 42530: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:58:30 angussyd sshd[36868]: Unable to negotiate with 218.92.0.204 port 14177: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:59:44 angussyd sshd[60357]: Unable to negotiate with 218.92.0.204 port 52180: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:00:36 angussyd sshd[86931]: user root login class [preauth] May 29 05:00:36 angussyd sshd[86931]: Received disconnect from 105.235.116.254 port 45428:11: Normal Shutdown, Thank you for playing [preauth] May 29 05:00:36 angussyd sshd[86931]: Disconnected from authenticating user root 105.235.116.254 port 45428 [preauth] May 29 05:00:36 angussyd sshguard[69778]: Attack from "105.235.116.254" on service 100 with danger 10. May 29 05:00:40 angussyd sshd[87084]: Connection closed by 189.139.128.57 port 53794 [preauth] May 29 05:00:40 angussyd sshguard[69778]: Attack from "189.139.128.57" on service 100 with danger 10. May 29 05:00:47 angussyd sshd[87450]: Unable to negotiate with 218.92.0.204 port 61824: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:01:56 angussyd sshd[31487]: Unable to negotiate with 218.92.0.204 port 55569: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:03:08 angussyd sshd[65337]: Unable to negotiate with 218.92.0.204 port 53662: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:04:21 angussyd sshd[90024]: Unable to negotiate with 218.92.0.204 port 51685: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:05:31 angussyd sshd[14249]: Unable to negotiate with 218.92.0.204 port 52598: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:05:41 angussyd sshd[14539]: Connection closed by 173.162.229.10 port 45396 [preauth] May 29 05:05:41 angussyd sshguard[69778]: Attack from "173.162.229.10" on service 100 with danger 10. May 29 05:06:34 angussyd sshd[40565]: Unable to negotiate with 218.92.0.204 port 10393: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:07:26 angussyd sshd[65779]: Unable to negotiate with 218.92.0.204 port 24192: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:07:38 angussyd sshd[66386]: Connection closed by 47.186.107.224 port 48044 [preauth] May 29 05:07:38 angussyd sshguard[69778]: Attack from "47.186.107.224" on service 100 with danger 10. May 29 05:08:16 angussyd sshd[92868]: Unable to negotiate with 218.92.0.204 port 33275: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:09:08 angussyd sshd[20640]: Unable to negotiate with 218.92.0.204 port 49266: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:09:59 angussyd sshd[21061]: Unable to negotiate with 218.92.0.204 port 53887: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:10:49 angussyd sshd[47300]: Unable to negotiate with 218.92.0.204 port 11681: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:11:42 angussyd sshd[72389]: Unable to negotiate with 218.92.0.204 port 27406: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:12:41 angussyd sshd[97559]: Unable to negotiate with 218.92.0.204 port 19892: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:13:38 angussyd sshd[24119]: Unable to negotiate with 218.92.0.204 port 63577: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:14:35 angussyd sshd[50469]: Unable to negotiate with 218.92.0.204 port 43719: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:15:43 angussyd sshd[75757]: Unable to negotiate with 218.92.0.204 port 51501: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:16:55 angussyd sshd[3728]: Unable to negotiate with 218.92.0.204 port 58544: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:18:01 angussyd sshd[27426]: Unable to negotiate with 218.92.0.204 port 42653: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:19:09 angussyd sshd[50910]: Unable to negotiate with 218.92.0.204 port 32958: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:20:24 angussyd sshd[3356]: Unable to negotiate with 218.92.0.204 port 26464: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:21:12 angussyd sshd[3626]: Unable to negotiate with 218.92.0.204 port 54520: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:22:18 angussyd sshd[29050]: Unable to negotiate with 218.92.0.204 port 44585: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:23:08 angussyd sshd[53867]: Unable to negotiate with 218.92.0.204 port 16688: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:24:05 angussyd sshd[80944]: Unable to negotiate with 218.92.0.204 port 52841: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:24:56 angussyd sshd[6876]: Unable to negotiate with 218.92.0.204 port 58294: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:25:52 angussyd sshd[32783]: Unable to negotiate with 218.92.0.204 port 30554: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:26:47 angussyd sshd[60945]: Unable to negotiate with 218.92.0.204 port 15948: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:27:38 angussyd sshd[86553]: Unable to negotiate with 218.92.0.204 port 20095: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:28:28 angussyd sshd[87148]: Unable to negotiate with 218.92.0.204 port 32516: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:29:19 angussyd sshd[13905]: Unable to negotiate with 218.92.0.204 port 34179: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:30:10 angussyd sshd[39885]: Unable to negotiate with 218.92.0.204 port 42056: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:31:00 angussyd sshd[64759]: Unable to negotiate with 218.92.0.204 port 56401: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:31:47 angussyd sshd[89473]: Unable to negotiate with 218.92.0.204 port 55430: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:32:43 angussyd sshd[13179]: Unable to negotiate with 218.92.0.204 port 26406: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:33:45 angussyd sshd[37932]: Unable to negotiate with 218.92.0.204 port 20574: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:34:44 angussyd sshd[62160]: Unable to negotiate with 218.92.0.204 port 20326: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:35:46 angussyd sshd[88037]: Unable to negotiate with 218.92.0.204 port 23276: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:36:44 angussyd sshd[14520]: Unable to negotiate with 218.92.0.204 port 17454: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:37:37 angussyd sshd[14846]: Unable to negotiate with 218.92.0.204 port 41707: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:38:27 angussyd sshd[42380]: Unable to negotiate with 218.92.0.204 port 55744: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:39:17 angussyd sshd[66988]: Unable to negotiate with 218.92.0.204 port 10352: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:39:34 angussyd sshd[67357]: Connection closed by 62.99.254.18 port 36013 [preauth] May 29 05:39:34 angussyd sshguard[69778]: Attack from "62.99.254.18" on service 100 with danger 10. May 29 05:40:10 angussyd sshd[94075]: Unable to negotiate with 218.92.0.204 port 20393: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:41:07 angussyd sshd[19650]: Unable to negotiate with 218.92.0.204 port 42320: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:42:05 angussyd sshd[46659]: Unable to negotiate with 218.92.0.204 port 22664: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:43:06 angussyd sshd[70605]: Unable to negotiate with 218.92.0.204 port 36876: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:44:12 angussyd sshd[96174]: Unable to negotiate with 218.92.0.204 port 12679: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:45:08 angussyd sshd[20966]: Unable to negotiate with 218.92.0.204 port 42284: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:46:04 angussyd sshd[47207]: Unable to negotiate with 218.92.0.204 port 19760: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:47:07 angussyd sshd[74392]: Unable to negotiate with 218.92.0.204 port 14134: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:48:05 angussyd sshd[99586]: Unable to negotiate with 218.92.0.204 port 20544: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:48:58 angussyd sshd[25535]: Unable to negotiate with 218.92.0.204 port 40225: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:49:48 angussyd sshd[25931]: Unable to negotiate with 218.92.0.204 port 36014: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:50:40 angussyd sshd[50071]: Unable to negotiate with 218.92.0.204 port 50089: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:51:32 angussyd sshd[75119]: Unable to negotiate with 218.92.0.204 port 15387: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:52:26 angussyd sshd[2070]: Unable to negotiate with 218.92.0.204 port 18926: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:53:20 angussyd sshd[28351]: Unable to negotiate with 218.92.0.204 port 55643: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:53:59 angussyd sshd[28691]: Invalid user hadoop from 129.213.97.191 port 34146 May 29 05:53:59 angussyd sshguard[69778]: Attack from "129.213.97.191" on service 100 with danger 10. May 29 05:53:59 angussyd sshd[28691]: user NOUSER login class [preauth] May 29 05:53:59 angussyd sshd[28691]: Received disconnect from 129.213.97.191 port 34146:11: Normal Shutdown, Thank you for playing [preauth] May 29 05:53:59 angussyd sshd[28691]: Disconnected from invalid user hadoop 129.213.97.191 port 34146 [preauth] May 29 05:53:59 angussyd sshguard[69778]: Attack from "129.213.97.191" on service 100 with danger 10. May 29 05:54:20 angussyd sshd[55830]: Unable to negotiate with 218.92.0.204 port 46325: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:55:16 angussyd sshd[80318]: Unable to negotiate with 218.92.0.204 port 34963: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:56:08 angussyd sshd[6582]: Unable to negotiate with 218.92.0.204 port 55488: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:57:00 angussyd sshd[6926]: Unable to negotiate with 218.92.0.204 port 28678: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:57:52 angussyd sshd[31405]: Unable to negotiate with 218.92.0.204 port 44763: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:58:45 angussyd sshd[56494]: Unable to negotiate with 218.92.0.204 port 61656: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 05:59:36 angussyd sshd[84354]: Unable to negotiate with 218.92.0.204 port 11494: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:00:35 angussyd sshd[12012]: Unable to negotiate with 218.92.0.204 port 37959: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:01:36 angussyd sshd[37168]: Unable to negotiate with 218.92.0.204 port 53339: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:02:41 angussyd sshd[62479]: Unable to negotiate with 218.92.0.204 port 25698: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:03:40 angussyd sshd[87306]: Unable to negotiate with 218.92.0.204 port 20428: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:04:37 angussyd sshd[15212]: Unable to negotiate with 218.92.0.204 port 49169: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:05:40 angussyd sshd[40024]: Unable to negotiate with 218.92.0.204 port 13292: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:06:31 angussyd sshd[65222]: Unable to negotiate with 218.92.0.204 port 62804: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:07:23 angussyd sshd[89786]: Unable to negotiate with 218.92.0.204 port 18968: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:08:17 angussyd sshd[90140]: Unable to negotiate with 218.92.0.204 port 41775: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:09:07 angussyd sshd[14332]: Unable to negotiate with 218.92.0.204 port 48308: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:09:54 angussyd sshd[38205]: Unable to negotiate with 218.92.0.204 port 51793: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:10:43 angussyd sshd[62967]: Unable to negotiate with 218.92.0.204 port 12659: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:11:34 angussyd sshd[88533]: Unable to negotiate with 218.92.0.204 port 19450: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:12:24 angussyd sshd[89072]: Unable to negotiate with 218.92.0.204 port 27931: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:13:17 angussyd sshd[14567]: Unable to negotiate with 218.92.0.204 port 46078: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:14:07 angussyd sshd[40098]: Unable to negotiate with 218.92.0.204 port 55371: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:14:58 angussyd sshd[63275]: Unable to negotiate with 218.92.0.204 port 50846: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:15:51 angussyd sshd[90398]: Unable to negotiate with 218.92.0.204 port 11956: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:16:44 angussyd sshd[17789]: Unable to negotiate with 218.92.0.204 port 32287: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:17:37 angussyd sshd[43498]: Unable to negotiate with 218.92.0.204 port 37560: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:18:36 angussyd sshd[68217]: user root login class [preauth] May 29 06:18:36 angussyd sshd[68217]: Received disconnect from 194.182.69.116 port 44658:11: Normal Shutdown, Thank you for playing [preauth] May 29 06:18:36 angussyd sshd[68217]: Disconnected from authenticating user root 194.182.69.116 port 44658 [preauth] May 29 06:18:36 angussyd sshguard[69778]: Attack from "194.182.69.116" on service 100 with danger 10. May 29 06:18:42 angussyd sshd[68804]: Unable to negotiate with 218.92.0.204 port 60058: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:19:46 angussyd sshd[93122]: Unable to negotiate with 218.92.0.204 port 33851: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:20:44 angussyd sshd[19939]: Unable to negotiate with 218.92.0.204 port 16991: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:21:38 angussyd sshd[47197]: Unable to negotiate with 218.92.0.204 port 54860: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:22:30 angussyd sshd[47554]: Unable to negotiate with 218.92.0.204 port 62691: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:23:21 angussyd sshd[73966]: Unable to negotiate with 218.92.0.204 port 28595: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:24:08 angussyd sshd[99383]: Unable to negotiate with 218.92.0.204 port 30018: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:24:56 angussyd sshd[24824]: Unable to negotiate with 218.92.0.204 port 28059: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:25:04 angussyd sshd[24652]: Invalid user support from 84.93.153.9 port 43552 May 29 06:25:04 angussyd sshguard[69778]: Attack from "84.93.153.9" on service 100 with danger 10. May 29 06:25:04 angussyd sshd[24652]: user NOUSER login class [preauth] May 29 06:25:04 angussyd sshd[24652]: Received disconnect from 84.93.153.9 port 43552:11: Normal Shutdown, Thank you for playing [preauth] May 29 06:25:04 angussyd sshd[24652]: Disconnected from invalid user support 84.93.153.9 port 43552 [preauth] May 29 06:25:04 angussyd sshguard[69778]: Attack from "84.93.153.9" on service 100 with danger 10. May 29 06:25:48 angussyd sshd[49295]: Unable to negotiate with 218.92.0.204 port 43274: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:26:40 angussyd sshd[49761]: Invalid user oracle from 167.99.8.158 port 32898 May 29 06:26:40 angussyd sshguard[69778]: Attack from "167.99.8.158" on service 100 with danger 10. May 29 06:26:40 angussyd sshd[49761]: user NOUSER login class [preauth] May 29 06:26:41 angussyd sshd[50028]: Unable to negotiate with 218.92.0.204 port 60115: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:26:41 angussyd sshd[49761]: Received disconnect from 167.99.8.158 port 32898:11: Normal Shutdown, Thank you for playing [preauth] May 29 06:26:41 angussyd sshd[49761]: Disconnected from invalid user oracle 167.99.8.158 port 32898 [preauth] May 29 06:26:41 angussyd sshguard[69778]: Attack from "167.99.8.158" on service 100 with danger 10. May 29 06:27:42 angussyd sshd[73423]: Unable to negotiate with 218.92.0.204 port 17836: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:28:38 angussyd sshd[98870]: Unable to negotiate with 218.92.0.204 port 37397: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:29:43 angussyd sshd[23100]: Unable to negotiate with 218.92.0.204 port 21242: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:30:42 angussyd sshd[48043]: Unable to negotiate with 218.92.0.204 port 10972: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:31:37 angussyd sshd[74783]: Unable to negotiate with 218.92.0.204 port 41727: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:32:32 angussyd sshd[2519]: Unable to negotiate with 218.92.0.204 port 64944: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:33:21 angussyd sshd[28866]: Unable to negotiate with 218.92.0.204 port 64297: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:33:23 angussyd sshd[29207]: Did not receive identification string from 80.87.144.229 port 53735 May 29 06:34:11 angussyd sshd[53355]: Unable to negotiate with 218.92.0.204 port 16657: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:34:59 angussyd sshd[78277]: Unable to negotiate with 218.92.0.204 port 15442: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:35:45 angussyd sshd[78569]: Invalid user user2 from 144.217.237.117 port 43358 May 29 06:35:45 angussyd sshguard[69778]: Attack from "144.217.237.117" on service 100 with danger 10. May 29 06:35:45 angussyd sshd[78569]: user NOUSER login class [preauth] May 29 06:35:45 angussyd sshd[78569]: Received disconnect from 144.217.237.117 port 43358:11: Normal Shutdown, Thank you for playing [preauth] May 29 06:35:45 angussyd sshd[78569]: Disconnected from invalid user user2 144.217.237.117 port 43358 [preauth] May 29 06:35:45 angussyd sshguard[69778]: Attack from "144.217.237.117" on service 100 with danger 10. May 29 06:35:50 angussyd sshd[78905]: Unable to negotiate with 218.92.0.204 port 27401: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:36:48 angussyd sshd[5714]: Unable to negotiate with 218.92.0.204 port 64886: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:37:45 angussyd sshd[31232]: Unable to negotiate with 218.92.0.204 port 41718: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:38:40 angussyd sshd[56118]: Unable to negotiate with 218.92.0.204 port 64167: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:39:38 angussyd sshd[82023]: Unable to negotiate with 218.92.0.204 port 44069: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:40:28 angussyd sshd[5154]: Unable to negotiate with 218.92.0.204 port 57596: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:41:16 angussyd sshd[30896]: Unable to negotiate with 218.92.0.204 port 54883: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:42:03 angussyd sshd[54109]: Unable to negotiate with 218.92.0.204 port 60408: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:42:53 angussyd sshd[54347]: Unable to negotiate with 218.92.0.204 port 15970: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:43:45 angussyd sshd[80411]: Unable to negotiate with 218.92.0.204 port 30699: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:44:36 angussyd sshd[6339]: Unable to negotiate with 218.92.0.204 port 39864: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:45:27 angussyd sshd[30804]: Unable to negotiate with 218.92.0.204 port 48681: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:46:19 angussyd sshd[55429]: Unable to negotiate with 218.92.0.204 port 53364: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:47:16 angussyd sshd[82171]: Unable to negotiate with 218.92.0.204 port 39628: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:48:08 angussyd sshd[82793]: Unable to negotiate with 218.92.0.204 port 54713: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:48:32 angussyd sshd[8742]: Invalid user oracle from 206.189.94.158 port 44092 May 29 06:48:32 angussyd sshguard[69778]: Attack from "206.189.94.158" on service 100 with danger 10. May 29 06:48:32 angussyd sshd[8742]: user NOUSER login class [preauth] May 29 06:48:32 angussyd sshd[8742]: Received disconnect from 206.189.94.158 port 44092:11: Normal Shutdown, Thank you for playing [preauth] May 29 06:48:32 angussyd sshd[8742]: Disconnected from invalid user oracle 206.189.94.158 port 44092 [preauth] May 29 06:48:32 angussyd sshguard[69778]: Attack from "206.189.94.158" on service 100 with danger 10. May 29 06:48:49 angussyd sshd[9077]: Connection closed by 134.175.141.166 port 49712 [preauth] May 29 06:48:49 angussyd sshguard[69778]: Attack from "134.175.141.166" on service 100 with danger 10. May 29 06:48:57 angussyd sshd[9384]: Unable to negotiate with 218.92.0.204 port 56806: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:49:51 angussyd sshd[34357]: Unable to negotiate with 218.92.0.204 port 15044: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:50:44 angussyd sshd[59600]: Unable to negotiate with 218.92.0.204 port 28129: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:51:37 angussyd sshd[86351]: Unable to negotiate with 218.92.0.204 port 53364: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:52:27 angussyd sshd[14027]: Unable to negotiate with 218.92.0.204 port 56227: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:53:25 angussyd sshd[40753]: Unable to negotiate with 218.92.0.204 port 43243: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:54:33 angussyd sshd[66246]: Unable to negotiate with 218.92.0.204 port 44678: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:55:50 angussyd sshd[90999]: Unable to negotiate with 218.92.0.204 port 52262: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:56:47 angussyd sshd[16370]: Unable to negotiate with 218.92.0.204 port 16556: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:57:53 angussyd sshd[42588]: Unable to negotiate with 218.92.0.204 port 43828: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:58:26 angussyd sshd[69430]: user root login class [preauth] May 29 06:58:26 angussyd sshd[69430]: Received disconnect from 98.234.14.119 port 38876:11: Normal Shutdown, Thank you for playing [preauth] May 29 06:58:26 angussyd sshd[69430]: Disconnected from authenticating user root 98.234.14.119 port 38876 [preauth] May 29 06:58:26 angussyd sshguard[69778]: Attack from "98.234.14.119" on service 100 with danger 10. May 29 06:58:48 angussyd sshd[69985]: Unable to negotiate with 218.92.0.204 port 12524: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 06:59:37 angussyd sshd[96551]: Unable to negotiate with 218.92.0.204 port 13417: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:00:35 angussyd sshd[23303]: Unable to negotiate with 218.92.0.204 port 58600: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:01:26 angussyd sshd[41479]: Unable to negotiate with 218.92.0.204 port 60159: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:02:25 angussyd sshd[49538]: Unable to negotiate with 218.92.0.204 port 47545: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:03:24 angussyd sshd[73938]: Unable to negotiate with 218.92.0.204 port 41059: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:04:23 angussyd sshd[99245]: Unable to negotiate with 218.92.0.204 port 30987: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:04:56 angussyd sshd[25347]: user root login class [preauth] May 29 07:04:56 angussyd sshd[25347]: Received disconnect from 159.65.81.187 port 49436:11: Normal Shutdown, Thank you for playing [preauth] May 29 07:04:56 angussyd sshd[25347]: Disconnected from authenticating user root 159.65.81.187 port 49436 [preauth] May 29 07:04:56 angussyd sshguard[69778]: Attack from "159.65.81.187" on service 100 with danger 10. May 29 07:05:14 angussyd sshd[25640]: Unable to negotiate with 218.92.0.204 port 48146: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:06:04 angussyd sshd[52970]: Unable to negotiate with 218.92.0.204 port 57659: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:06:51 angussyd sshd[77486]: Unable to negotiate with 218.92.0.204 port 54714: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:07:41 angussyd sshd[3401]: Unable to negotiate with 218.92.0.204 port 15024: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:08:31 angussyd sshd[3871]: Unable to negotiate with 218.92.0.204 port 25729: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:09:26 angussyd sshd[31349]: Unable to negotiate with 218.92.0.204 port 34892: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:10:12 angussyd sshd[54901]: Unable to negotiate with 218.92.0.204 port 34927: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:11:08 angussyd sshd[79083]: Unable to negotiate with 218.92.0.204 port 54538: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:12:04 angussyd sshd[3372]: Unable to negotiate with 218.92.0.204 port 31286: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:12:56 angussyd sshd[28607]: Unable to negotiate with 218.92.0.204 port 46487: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:13:51 angussyd sshd[52739]: Unable to negotiate with 218.92.0.204 port 24673: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:14:51 angussyd sshd[77876]: Unable to negotiate with 218.92.0.204 port 24045: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:15:52 angussyd sshd[3281]: Unable to negotiate with 218.92.0.204 port 30983: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:16:45 angussyd sshd[22393]: Unable to negotiate with 218.92.0.204 port 57228: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:17:37 angussyd sshd[28530]: Unable to negotiate with 218.92.0.204 port 15016: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:18:32 angussyd sshd[53795]: Unable to negotiate with 218.92.0.204 port 39653: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:19:28 angussyd sshd[79726]: Unable to negotiate with 218.92.0.204 port 19041: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:20:27 angussyd sshd[7624]: Unable to negotiate with 218.92.0.204 port 22077: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:21:23 angussyd sshd[33563]: Unable to negotiate with 218.92.0.204 port 35042: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:22:34 angussyd sshd[60468]: Unable to negotiate with 218.92.0.204 port 53501: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:23:37 angussyd sshd[85361]: Unable to negotiate with 218.92.0.204 port 58791: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:24:10 angussyd sshd[12026]: Did not receive identification string from 185.173.35.53 port 50049 May 29 07:24:28 angussyd sshd[12229]: Unable to negotiate with 218.92.0.204 port 52788: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:25:23 angussyd sshd[38208]: Unable to negotiate with 218.92.0.204 port 22088: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:26:16 angussyd sshd[64967]: Unable to negotiate with 218.92.0.204 port 55813: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:27:04 angussyd sshd[91248]: Unable to negotiate with 218.92.0.204 port 60078: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:27:54 angussyd sshd[91886]: Unable to negotiate with 218.92.0.204 port 18486: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:28:45 angussyd sshd[15646]: Unable to negotiate with 218.92.0.204 port 32613: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:29:37 angussyd sshd[41617]: Unable to negotiate with 218.92.0.204 port 51254: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:30:26 angussyd sshd[66141]: Unable to negotiate with 218.92.0.204 port 55553: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:31:14 angussyd sshd[92706]: Unable to negotiate with 218.92.0.204 port 57030: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:32:06 angussyd sshd[17679]: Unable to negotiate with 218.92.0.204 port 16914: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:32:57 angussyd sshd[17941]: Unable to negotiate with 218.92.0.204 port 35623: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:33:45 angussyd sshd[42775]: Unable to negotiate with 218.92.0.204 port 22646: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:34:37 angussyd sshd[67133]: Unable to negotiate with 218.92.0.204 port 36299: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:35:32 angussyd sshd[93491]: Unable to negotiate with 218.92.0.204 port 59012: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:36:27 angussyd sshd[20126]: Unable to negotiate with 218.92.0.204 port 36016: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:37:17 angussyd sshd[44787]: Unable to negotiate with 218.92.0.204 port 31853: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:38:07 angussyd sshd[45130]: Unable to negotiate with 218.92.0.204 port 51588: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:38:56 angussyd sshd[71578]: Unable to negotiate with 218.92.0.204 port 55961: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:39:46 angussyd sshd[96294]: Unable to negotiate with 218.92.0.204 port 12743: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:40:37 angussyd sshd[22886]: Unable to negotiate with 218.92.0.204 port 31254: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:41:26 angussyd sshd[50221]: Unable to negotiate with 218.92.0.204 port 28275: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:42:19 angussyd sshd[73895]: Unable to negotiate with 218.92.0.204 port 45366: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:43:20 angussyd sshd[2491]: Unable to negotiate with 218.92.0.204 port 52030: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:44:18 angussyd sshd[2857]: Unable to negotiate with 218.92.0.204 port 40432: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:45:08 angussyd sshd[27277]: Unable to negotiate with 218.92.0.204 port 55565: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:46:06 angussyd sshd[52216]: Unable to negotiate with 218.92.0.204 port 56827: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:46:56 angussyd sshd[77309]: Unable to negotiate with 218.92.0.204 port 55506: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:47:47 angussyd sshd[2801]: Unable to negotiate with 218.92.0.204 port 58091: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:48:36 angussyd sshd[28616]: Unable to negotiate with 218.92.0.204 port 11839: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:49:28 angussyd sshd[54702]: Unable to negotiate with 218.92.0.204 port 17454: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:50:18 angussyd sshd[54922]: Unable to negotiate with 218.92.0.204 port 24181: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:51:06 angussyd sshd[80261]: Unable to negotiate with 218.92.0.204 port 26218: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:51:55 angussyd sshd[7520]: Unable to negotiate with 218.92.0.204 port 38589: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:52:48 angussyd sshd[35171]: Unable to negotiate with 218.92.0.204 port 54684: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:53:48 angussyd sshd[59815]: Unable to negotiate with 218.92.0.204 port 13267: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:54:28 angussyd sshd[60209]: Connection closed by 193.112.213.48 port 38504 [preauth] May 29 07:54:28 angussyd sshguard[69778]: Attack from "193.112.213.48" on service 100 with danger 10. May 29 07:54:36 angussyd sshd[84517]: Unable to negotiate with 218.92.0.204 port 46273: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:55:27 angussyd sshd[84862]: Unable to negotiate with 218.92.0.204 port 58256: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:56:19 angussyd sshd[11575]: Unable to negotiate with 218.92.0.204 port 23160: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:57:11 angussyd sshd[36409]: Unable to negotiate with 218.92.0.204 port 36689: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:58:02 angussyd sshd[62516]: Unable to negotiate with 218.92.0.204 port 53738: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:58:52 angussyd sshd[87495]: Unable to negotiate with 218.92.0.204 port 10448: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 07:59:42 angussyd sshd[10387]: Unable to negotiate with 218.92.0.204 port 18537: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:00:34 angussyd sshd[11896]: Unable to negotiate with 218.92.0.204 port 29140: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:01:09 angussyd sshd[38612]: Connection closed by 62.20.243.49 port 54270 [preauth] May 29 08:01:09 angussyd sshguard[69778]: Attack from "62.20.243.49" on service 100 with danger 10. May 29 08:01:26 angussyd sshd[38935]: Unable to negotiate with 218.92.0.204 port 38809: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:02:16 angussyd sshd[65644]: Unable to negotiate with 218.92.0.204 port 46490: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:02:24 angussyd sshd[65701]: Connection closed by 139.59.149.183 port 59886 [preauth] May 29 08:02:24 angussyd sshguard[69778]: Attack from "139.59.149.183" on service 100 with danger 10. May 29 08:03:03 angussyd sshd[92312]: Unable to negotiate with 218.92.0.204 port 45605: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:03:56 angussyd sshd[18233]: Unable to negotiate with 218.92.0.204 port 14221: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:04:48 angussyd sshd[42507]: Unable to negotiate with 218.92.0.204 port 38708: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:05:42 angussyd sshd[42684]: Unable to negotiate with 218.92.0.204 port 54887: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:06:34 angussyd sshd[68807]: Unable to negotiate with 218.92.0.204 port 19707: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:07:34 angussyd sshd[95117]: Unable to negotiate with 218.92.0.204 port 60000: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:08:43 angussyd sshd[23513]: Unable to negotiate with 218.92.0.204 port 59939: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:09:35 angussyd sshd[48363]: Unable to negotiate with 218.92.0.204 port 62284: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:10:29 angussyd sshd[73230]: Unable to negotiate with 218.92.0.204 port 37590: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:11:22 angussyd sshd[97678]: Unable to negotiate with 218.92.0.204 port 10662: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:12:11 angussyd sshd[21140]: Unable to negotiate with 218.92.0.204 port 14877: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:13:00 angussyd sshd[47702]: Unable to negotiate with 218.92.0.204 port 26902: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:13:49 angussyd sshd[48075]: Unable to negotiate with 218.92.0.204 port 26023: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:14:41 angussyd sshd[73826]: Unable to negotiate with 218.92.0.204 port 46850: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:15:29 angussyd sshd[239]: Unable to negotiate with 218.92.0.204 port 40809: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:16:19 angussyd sshd[26996]: Unable to negotiate with 218.92.0.204 port 57300: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:17:07 angussyd sshd[52443]: Unable to negotiate with 218.92.0.204 port 64155: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:18:01 angussyd sshd[52827]: Unable to negotiate with 218.92.0.204 port 28453: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:18:24 angussyd sshd[77713]: user admin login class [preauth] May 29 08:18:24 angussyd sshd[77713]: Received disconnect from 130.211.246.128 port 59388:11: Normal Shutdown, Thank you for playing [preauth] May 29 08:18:24 angussyd sshd[77713]: Disconnected from authenticating user admin 130.211.246.128 port 59388 [preauth] May 29 08:18:24 angussyd sshguard[69778]: Attack from "130.211.246.128" on service 100 with danger 10. May 29 08:18:51 angussyd sshd[78080]: Unable to negotiate with 218.92.0.204 port 46738: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:19:41 angussyd sshd[5299]: Unable to negotiate with 218.92.0.204 port 49913: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:20:33 angussyd sshd[30694]: Unable to negotiate with 218.92.0.204 port 58998: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:21:29 angussyd sshd[57934]: Unable to negotiate with 218.92.0.204 port 30236: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:22:26 angussyd sshd[81969]: Unable to negotiate with 218.92.0.204 port 24954: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:23:25 angussyd sshd[7443]: Unable to negotiate with 218.92.0.204 port 22072: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:24:29 angussyd sshd[33732]: Unable to negotiate with 218.92.0.204 port 11209: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:25:29 angussyd sshd[58895]: Unable to negotiate with 218.92.0.204 port 11705: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:26:39 angussyd sshd[83609]: Unable to negotiate with 218.92.0.204 port 19908: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:27:11 angussyd sshd[83721]: Invalid user applmgr from 104.248.235.0 port 43002 May 29 08:27:11 angussyd sshguard[69778]: Attack from "104.248.235.0" on service 100 with danger 10. May 29 08:27:11 angussyd sshd[83721]: user NOUSER login class [preauth] May 29 08:27:11 angussyd sshd[83721]: Received disconnect from 104.248.235.0 port 43002:11: Normal Shutdown, Thank you for playing [preauth] May 29 08:27:11 angussyd sshd[83721]: Disconnected from invalid user applmgr 104.248.235.0 port 43002 [preauth] May 29 08:27:11 angussyd sshguard[69778]: Attack from "104.248.235.0" on service 100 with danger 10. May 29 08:27:34 angussyd sshd[9426]: Unable to negotiate with 218.92.0.204 port 38817: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:28:31 angussyd sshd[33785]: Unable to negotiate with 218.92.0.204 port 16143: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:29:23 angussyd sshd[61986]: Unable to negotiate with 218.92.0.204 port 34402: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:30:12 angussyd sshd[62198]: Unable to negotiate with 218.92.0.204 port 46543: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:31:01 angussyd sshd[84703]: Unable to negotiate with 218.92.0.204 port 52848: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:31:53 angussyd sshd[9676]: Unable to negotiate with 218.92.0.204 port 13794: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:32:45 angussyd sshd[34841]: Unable to negotiate with 218.92.0.204 port 26455: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:33:34 angussyd sshd[57990]: Unable to negotiate with 218.92.0.204 port 33616: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:34:22 angussyd sshd[58530]: Unable to negotiate with 218.92.0.204 port 26403: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:35:14 angussyd sshd[82768]: Unable to negotiate with 218.92.0.204 port 49842: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:36:05 angussyd sshd[8136]: Unable to negotiate with 218.92.0.204 port 64077: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:36:52 angussyd sshd[34721]: Unable to negotiate with 218.92.0.204 port 19065: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:37:39 angussyd sshd[58655]: Unable to negotiate with 218.92.0.204 port 22182: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:37:54 angussyd sshd[59004]: Connection closed by 178.128.162.10 port 55440 [preauth] May 29 08:37:54 angussyd sshguard[69778]: Attack from "178.128.162.10" on service 100 with danger 10. May 29 08:38:30 angussyd sshd[82491]: Unable to negotiate with 218.92.0.204 port 35973: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:39:21 angussyd sshd[82723]: Unable to negotiate with 218.92.0.204 port 43310: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:40:12 angussyd sshd[8313]: Unable to negotiate with 218.92.0.204 port 53541: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:40:16 angussyd sshd[8680]: Connection closed by 134.175.174.9 port 59576 [preauth] May 29 08:40:16 angussyd sshguard[69778]: Attack from "134.175.174.9" on service 100 with danger 10. May 29 08:41:02 angussyd sshd[34139]: Unable to negotiate with 218.92.0.204 port 61758: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:41:54 angussyd sshd[58680]: Unable to negotiate with 218.92.0.204 port 12410: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:42:57 angussyd sshd[84204]: Unable to negotiate with 218.92.0.204 port 19400: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:43:56 angussyd sshd[9834]: Unable to negotiate with 218.92.0.204 port 10574: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:44:52 angussyd sshd[35091]: Unable to negotiate with 218.92.0.204 port 46311: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:45:47 angussyd sshd[61280]: Unable to negotiate with 218.92.0.204 port 16403: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:46:39 angussyd sshd[87025]: Unable to negotiate with 218.92.0.204 port 32814: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:47:15 angussyd sshd[87464]: Invalid user usuario from 159.65.54.221 port 46588 May 29 08:47:15 angussyd sshguard[69778]: Attack from "159.65.54.221" on service 100 with danger 10. May 29 08:47:15 angussyd sshd[87464]: user NOUSER login class [preauth] May 29 08:47:16 angussyd sshd[87464]: Received disconnect from 159.65.54.221 port 46588:11: Normal Shutdown, Thank you for playing [preauth] May 29 08:47:16 angussyd sshd[87464]: Disconnected from invalid user usuario 159.65.54.221 port 46588 [preauth] May 29 08:47:16 angussyd sshguard[69778]: Attack from "159.65.54.221" on service 100 with danger 10. May 29 08:47:28 angussyd sshd[87824]: Unable to negotiate with 218.92.0.204 port 37255: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:48:17 angussyd sshd[14486]: Unable to negotiate with 218.92.0.204 port 56078: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:49:09 angussyd sshd[37027]: Unable to negotiate with 218.92.0.204 port 60111: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:50:08 angussyd sshd[61989]: Unable to negotiate with 218.92.0.204 port 19564: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:50:57 angussyd sshd[87500]: Unable to negotiate with 218.92.0.204 port 60144: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:51:53 angussyd sshd[15211]: Unable to negotiate with 218.92.0.204 port 37126: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:52:49 angussyd sshd[40204]: Unable to negotiate with 218.92.0.204 port 10104: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:53:08 angussyd sshd[40498]: user root login class [preauth] May 29 08:53:08 angussyd sshd[40498]: Received disconnect from 36.66.149.211 port 50438:11: Normal Shutdown, Thank you for playing [preauth] May 29 08:53:08 angussyd sshd[40498]: Disconnected from authenticating user root 36.66.149.211 port 50438 [preauth] May 29 08:53:08 angussyd sshguard[69778]: Attack from "36.66.149.211" on service 100 with danger 10. May 29 08:53:41 angussyd sshd[41125]: Unable to negotiate with 218.92.0.204 port 32879: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:54:30 angussyd sshd[67032]: Unable to negotiate with 218.92.0.204 port 38078: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:55:18 angussyd sshd[92237]: Unable to negotiate with 218.92.0.204 port 42261: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:56:07 angussyd sshd[17925]: Unable to negotiate with 218.92.0.204 port 45830: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:57:01 angussyd sshd[43314]: Unable to negotiate with 218.92.0.204 port 15046: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:57:56 angussyd sshd[67825]: Unable to negotiate with 218.92.0.204 port 39227: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:58:52 angussyd sshd[68287]: Unable to negotiate with 218.92.0.204 port 13031: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 08:59:48 angussyd sshd[94724]: Unable to negotiate with 218.92.0.204 port 48950: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:00:47 angussyd sshd[21799]: Unable to negotiate with 218.92.0.204 port 35980: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:01:43 angussyd sshd[47269]: Unable to negotiate with 218.92.0.204 port 13982: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:02:37 angussyd sshd[72461]: Unable to negotiate with 218.92.0.204 port 52279: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:03:33 angussyd sshd[96656]: Unable to negotiate with 218.92.0.204 port 14493: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:04:21 angussyd sshd[21778]: Unable to negotiate with 218.92.0.204 port 19306: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:05:14 angussyd sshd[49142]: Unable to negotiate with 218.92.0.204 port 36723: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:06:05 angussyd sshd[75041]: Unable to negotiate with 218.92.0.204 port 44216: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:06:57 angussyd sshd[75187]: Unable to negotiate with 218.92.0.204 port 58121: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:07:46 angussyd sshd[99634]: Unable to negotiate with 218.92.0.204 port 61984: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:08:35 angussyd sshd[23992]: Unable to negotiate with 218.92.0.204 port 18806: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:09:25 angussyd sshd[49632]: Unable to negotiate with 218.92.0.204 port 37735: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:10:17 angussyd sshd[74440]: Unable to negotiate with 218.92.0.204 port 50432: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:11:07 angussyd sshd[74640]: Unable to negotiate with 218.92.0.204 port 56011: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:11:58 angussyd sshd[99825]: Unable to negotiate with 218.92.0.204 port 17623: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:12:47 angussyd sshd[25997]: Unable to negotiate with 218.92.0.204 port 19096: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:13:21 angussyd sshd[49352]: Invalid user usuario from 65.26.240.14 port 40502 May 29 09:13:21 angussyd sshguard[69778]: Attack from "65.26.240.14" on service 100 with danger 10. May 29 09:13:21 angussyd sshd[49352]: user NOUSER login class [preauth] May 29 09:13:21 angussyd sshd[49352]: Received disconnect from 65.26.240.14 port 40502:11: Normal Shutdown, Thank you for playing [preauth] May 29 09:13:21 angussyd sshd[49352]: Disconnected from invalid user usuario 65.26.240.14 port 40502 [preauth] May 29 09:13:21 angussyd sshguard[69778]: Attack from "65.26.240.14" on service 100 with danger 10. May 29 09:13:37 angussyd sshd[49452]: Unable to negotiate with 218.92.0.204 port 32767: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:14:27 angussyd sshd[76811]: Unable to negotiate with 218.92.0.204 port 47316: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:15:17 angussyd sshd[151]: Unable to negotiate with 218.92.0.204 port 58377: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:16:07 angussyd sshd[286]: Unable to negotiate with 218.92.0.204 port 12231: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:16:48 angussyd sshd[24364]: Connection closed by 164.163.99.10 port 36264 [preauth] May 29 09:16:48 angussyd sshguard[69778]: Attack from "164.163.99.10" on service 100 with danger 10. May 29 09:16:59 angussyd sshd[24479]: Unable to negotiate with 218.92.0.204 port 21890: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:17:15 angussyd sshd[24641]: user admin login class [preauth] May 29 09:17:15 angussyd sshd[24641]: Disconnecting authenticating user admin 185.232.67.11 port 39640: Change of username or service not allowed: (admin,ssh-connection) -> (user,ssh-connection) [preauth] May 29 09:17:57 angussyd sshd[50685]: Unable to negotiate with 218.92.0.204 port 55147: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:18:53 angussyd sshd[75294]: Unable to negotiate with 218.92.0.204 port 24011: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:19:45 angussyd sshd[110]: Unable to negotiate with 218.92.0.204 port 39848: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:20:42 angussyd sshd[26678]: Unable to negotiate with 218.92.0.204 port 11736: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:21:33 angussyd sshd[51900]: Unable to negotiate with 218.92.0.204 port 34857: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:22:25 angussyd sshd[76011]: Unable to negotiate with 218.92.0.204 port 48768: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:23:15 angussyd sshd[76282]: Unable to negotiate with 218.92.0.204 port 51713: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:24:06 angussyd sshd[4264]: Unable to negotiate with 218.92.0.204 port 15887: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:24:58 angussyd sshd[32489]: Unable to negotiate with 218.92.0.204 port 29326: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:25:50 angussyd sshd[59764]: Unable to negotiate with 218.92.0.204 port 45413: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:26:11 angussyd sshd[60298]: Invalid user hadoop from 139.59.74.143 port 37604 May 29 09:26:11 angussyd sshguard[69778]: Attack from "139.59.74.143" on service 100 with danger 10. May 29 09:26:11 angussyd sshd[60298]: user NOUSER login class [preauth] May 29 09:26:12 angussyd sshd[60298]: Received disconnect from 139.59.74.143 port 37604:11: Normal Shutdown, Thank you for playing [preauth] May 29 09:26:12 angussyd sshd[60298]: Disconnected from invalid user hadoop 139.59.74.143 port 37604 [preauth] May 29 09:26:12 angussyd sshguard[69778]: Attack from "139.59.74.143" on service 100 with danger 10. May 29 09:26:37 angussyd sshd[85483]: Unable to negotiate with 218.92.0.204 port 50886: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:27:30 angussyd sshd[10441]: Unable to negotiate with 218.92.0.204 port 19580: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:28:22 angussyd sshd[11023]: Unable to negotiate with 218.92.0.204 port 31365: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:29:13 angussyd sshd[37382]: Unable to negotiate with 218.92.0.204 port 45330: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:30:04 angussyd sshd[62361]: Unable to negotiate with 218.92.0.204 port 54441: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:30:57 angussyd sshd[87803]: Unable to negotiate with 218.92.0.204 port 54726: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:31:52 angussyd sshd[13208]: Unable to negotiate with 218.92.0.204 port 36564: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:32:41 angussyd sshd[38684]: Unable to negotiate with 218.92.0.204 port 38675: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:33:28 angussyd sshd[39244]: Unable to negotiate with 218.92.0.204 port 45222: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:34:18 angussyd sshd[64413]: Unable to negotiate with 218.92.0.204 port 59845: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:35:09 angussyd sshd[89538]: Unable to negotiate with 218.92.0.204 port 63722: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:36:03 angussyd sshd[15188]: Unable to negotiate with 218.92.0.204 port 45522: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:36:52 angussyd sshd[40860]: Unable to negotiate with 218.92.0.204 port 41195: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:37:44 angussyd sshd[68954]: Unable to negotiate with 218.92.0.204 port 63676: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:38:37 angussyd sshd[69263]: Unable to negotiate with 218.92.0.204 port 22928: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:39:33 angussyd sshd[94880]: Unable to negotiate with 218.92.0.204 port 49553: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:40:25 angussyd sshd[18331]: Unable to negotiate with 218.92.0.204 port 12235: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:41:23 angussyd sshd[44832]: Unable to negotiate with 218.92.0.204 port 51904: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:42:28 angussyd sshd[69323]: Unable to negotiate with 218.92.0.204 port 22327: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:43:43 angussyd sshd[95571]: Unable to negotiate with 218.92.0.204 port 30632: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:44:41 angussyd sshd[22230]: Unable to negotiate with 218.92.0.204 port 27296: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:45:42 angussyd sshd[49639]: Unable to negotiate with 218.92.0.204 port 29714: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:46:38 angussyd sshd[76588]: Unable to negotiate with 218.92.0.204 port 42351: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:47:23 angussyd sshd[3446]: Unable to negotiate with 218.92.0.204 port 41732: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:48:15 angussyd sshd[28762]: Unable to negotiate with 218.92.0.204 port 10520: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:49:08 angussyd sshd[54526]: Unable to negotiate with 218.92.0.204 port 20541: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:49:59 angussyd sshd[80718]: Unable to negotiate with 218.92.0.204 port 29072: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:50:47 angussyd sshd[81091]: Unable to negotiate with 218.92.0.204 port 27145: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:51:38 angussyd sshd[7773]: Unable to negotiate with 218.92.0.204 port 48892: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:52:29 angussyd sshd[34196]: Unable to negotiate with 218.92.0.204 port 62001: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:53:20 angussyd sshd[60124]: Unable to negotiate with 218.92.0.204 port 28885: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:54:10 angussyd sshd[87261]: Unable to negotiate with 218.92.0.204 port 50202: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:54:58 angussyd sshd[87893]: Unable to negotiate with 218.92.0.204 port 58653: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:55:50 angussyd sshd[14756]: Unable to negotiate with 218.92.0.204 port 12795: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:56:40 angussyd sshd[40133]: Unable to negotiate with 218.92.0.204 port 17608: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:56:49 angussyd sshd[40609]: user admin login class [preauth] May 29 09:56:50 angussyd sshd[40609]: Connection closed by authenticating user admin 37.114.189.113 port 40422 [preauth] May 29 09:57:33 angussyd sshd[66565]: Unable to negotiate with 218.92.0.204 port 43849: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:58:19 angussyd sshd[92240]: Unable to negotiate with 218.92.0.204 port 36540: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 09:59:11 angussyd sshd[15011]: Unable to negotiate with 218.92.0.204 port 57629: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:00:04 angussyd sshd[16506]: Unable to negotiate with 218.92.0.204 port 27371: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:00:54 angussyd sshd[42370]: Unable to negotiate with 218.92.0.204 port 32058: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:01:44 angussyd sshd[67548]: Unable to negotiate with 218.92.0.204 port 41429: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:02:38 angussyd sshd[94113]: Unable to negotiate with 218.92.0.204 port 59030: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:03:31 angussyd sshd[19163]: Unable to negotiate with 218.92.0.204 port 18774: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:04:23 angussyd sshd[42787]: Unable to negotiate with 218.92.0.204 port 32709: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:05:12 angussyd sshd[43205]: Unable to negotiate with 218.92.0.204 port 41584: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:06:02 angussyd sshd[69263]: Unable to negotiate with 218.92.0.204 port 54705: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:06:57 angussyd sshd[96096]: Unable to negotiate with 218.92.0.204 port 32785: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:07:49 angussyd sshd[22947]: Unable to negotiate with 218.92.0.204 port 44098: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:08:39 angussyd sshd[49972]: Unable to negotiate with 218.92.0.204 port 60047: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:09:33 angussyd sshd[75368]: Unable to negotiate with 218.92.0.204 port 17605: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:10:26 angussyd sshd[4222]: Unable to negotiate with 218.92.0.204 port 39386: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:11:16 angussyd sshd[4489]: Unable to negotiate with 218.92.0.204 port 49731: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:12:05 angussyd sshd[30256]: Unable to negotiate with 218.92.0.204 port 61916: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:13:01 angussyd sshd[56092]: Unable to negotiate with 218.92.0.204 port 52154: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:13:54 angussyd sshd[80838]: Unable to negotiate with 218.92.0.204 port 50411: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:14:46 angussyd sshd[6641]: Unable to negotiate with 218.92.0.204 port 62742: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:14:46 angussyd sshd[6905]: Bad protocol version identification '\026\003\001\001"\001' from 164.52.24.164 port 34093 May 29 10:14:46 angussyd sshguard[69778]: Attack from "164.52.24.164" on service 100 with danger 10. May 29 10:15:35 angussyd sshd[7164]: Invalid user qhsupport from 139.59.79.56 port 44652 May 29 10:15:35 angussyd sshguard[69778]: Attack from "139.59.79.56" on service 100 with danger 10. May 29 10:15:35 angussyd sshd[7164]: user NOUSER login class [preauth] May 29 10:15:35 angussyd sshd[7164]: Received disconnect from 139.59.79.56 port 44652:11: Normal Shutdown, Thank you for playing [preauth] May 29 10:15:35 angussyd sshd[7164]: Disconnected from invalid user qhsupport 139.59.79.56 port 44652 [preauth] May 29 10:15:35 angussyd sshguard[69778]: Attack from "139.59.79.56" on service 100 with danger 10. May 29 10:15:37 angussyd sshd[33500]: Unable to negotiate with 218.92.0.204 port 25736: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:16:28 angussyd sshd[33920]: Unable to negotiate with 218.92.0.204 port 29717: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:17:23 angussyd sshd[60958]: Unable to negotiate with 218.92.0.204 port 61284: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:18:11 angussyd sshd[86963]: Unable to negotiate with 218.92.0.204 port 12972: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:18:59 angussyd sshd[13420]: Unable to negotiate with 218.92.0.204 port 20395: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:19:49 angussyd sshd[40125]: Unable to negotiate with 218.92.0.204 port 20850: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:20:46 angussyd sshd[66007]: Unable to negotiate with 218.92.0.204 port 50007: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:21:03 angussyd sshd[66413]: Connection closed by 142.93.18.15 port 39191 [preauth] May 29 10:21:03 angussyd sshguard[69778]: Attack from "142.93.18.15" on service 100 with danger 10. May 29 10:21:43 angussyd sshd[91679]: Unable to negotiate with 218.92.0.204 port 31889: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:22:34 angussyd sshd[91794]: Unable to negotiate with 218.92.0.204 port 37000: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:22:49 angussyd sshd[16963]: user root login class [preauth] May 29 10:22:50 angussyd sshd[16963]: Received disconnect from 51.75.169.236 port 56002:11: Normal Shutdown, Thank you for playing [preauth] May 29 10:22:50 angussyd sshd[16963]: Disconnected from authenticating user root 51.75.169.236 port 56002 [preauth] May 29 10:22:50 angussyd sshguard[69778]: Attack from "51.75.169.236" on service 100 with danger 10. May 29 10:23:28 angussyd sshd[17361]: Unable to negotiate with 218.92.0.204 port 57895: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:24:24 angussyd sshd[42841]: Unable to negotiate with 218.92.0.204 port 42429: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:24:51 angussyd sshd[68461]: Connection closed by 177.79.5.102 port 10916 [preauth] May 29 10:24:51 angussyd sshguard[69778]: Attack from "177.79.5.102" on service 100 with danger 10. May 29 10:25:19 angussyd sshd[68566]: Unable to negotiate with 218.92.0.204 port 10079: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:26:10 angussyd sshd[95348]: Unable to negotiate with 218.92.0.204 port 22906: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:27:12 angussyd sshd[19995]: Unable to negotiate with 218.92.0.204 port 26626: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:28:12 angussyd sshd[44570]: Unable to negotiate with 218.92.0.204 port 11672: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:29:08 angussyd sshd[72363]: Unable to negotiate with 218.92.0.204 port 40159: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:30:02 angussyd sshd[99218]: Unable to negotiate with 218.92.0.204 port 17979: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:30:58 angussyd sshd[25956]: Unable to negotiate with 218.92.0.204 port 46848: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:31:55 angussyd sshd[51943]: Unable to negotiate with 218.92.0.204 port 34228: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:32:20 angussyd sshd[52374]: Invalid user cturner from 1.109.89.205 port 36246 May 29 10:32:20 angussyd sshguard[69778]: Attack from "1.109.89.205" on service 100 with danger 10. May 29 10:32:20 angussyd sshd[52374]: user NOUSER login class [preauth] May 29 10:32:20 angussyd sshd[52374]: Received disconnect from 1.109.89.205 port 36246:11: Bye Bye [preauth] May 29 10:32:20 angussyd sshd[52374]: Disconnected from invalid user cturner 1.109.89.205 port 36246 [preauth] May 29 10:32:20 angussyd sshguard[69778]: Attack from "1.109.89.205" on service 100 with danger 10. May 29 10:32:47 angussyd sshd[52668]: Unable to negotiate with 218.92.0.204 port 52251: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:32:52 angussyd sshd[52711]: user root login class [preauth] May 29 10:32:53 angussyd sshd[52711]: Received disconnect from 105.235.116.254 port 51280:11: Normal Shutdown, Thank you for playing [preauth] May 29 10:32:53 angussyd sshd[52711]: Disconnected from authenticating user root 105.235.116.254 port 51280 [preauth] May 29 10:32:53 angussyd sshguard[69778]: Attack from "105.235.116.254" on service 100 with danger 10. May 29 10:33:38 angussyd sshd[78028]: Unable to negotiate with 218.92.0.204 port 55074: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:34:12 angussyd sshd[1708]: Received disconnect from 210.26.64.55 port 53094:11: Bye Bye [preauth] May 29 10:34:12 angussyd sshd[1708]: Disconnected from 210.26.64.55 port 53094 [preauth] May 29 10:34:12 angussyd sshguard[69778]: Attack from "210.26.64.55" on service 100 with danger 10. May 29 10:34:34 angussyd sshd[1782]: Unable to negotiate with 218.92.0.204 port 27718: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:35:25 angussyd sshd[27946]: Unable to negotiate with 218.92.0.204 port 38335: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:36:14 angussyd sshd[53014]: Unable to negotiate with 218.92.0.204 port 35354: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:37:07 angussyd sshd[78296]: Unable to negotiate with 218.92.0.204 port 10382: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:38:03 angussyd sshd[2521]: Unable to negotiate with 218.92.0.204 port 39579: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:38:55 angussyd sshd[2683]: Unable to negotiate with 218.92.0.204 port 10241: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:39:47 angussyd sshd[26871]: Unable to negotiate with 218.92.0.204 port 25886: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:40:38 angussyd sshd[52528]: Unable to negotiate with 218.92.0.204 port 43659: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:41:31 angussyd sshd[77425]: Unable to negotiate with 218.92.0.204 port 54082: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:42:22 angussyd sshd[886]: Unable to negotiate with 218.92.0.204 port 59805: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:43:11 angussyd sshd[28925]: Unable to negotiate with 218.92.0.204 port 10299: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:44:07 angussyd sshd[53348]: Unable to negotiate with 218.92.0.204 port 47384: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:45:20 angussyd sshd[81326]: Unable to negotiate with 218.92.0.204 port 53023: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:46:48 angussyd sshd[6096]: Unable to negotiate with 218.92.0.204 port 53236: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:47:55 angussyd sshd[30937]: Unable to negotiate with 218.92.0.204 port 12365: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:49:17 angussyd sshd[81585]: Unable to negotiate with 218.92.0.204 port 20137: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:50:17 angussyd sshd[4625]: Unable to negotiate with 218.92.0.204 port 16949: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:51:16 angussyd sshd[31871]: Unable to negotiate with 218.92.0.204 port 64656: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:52:11 angussyd sshd[32391]: Unable to negotiate with 218.92.0.204 port 24284: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:53:06 angussyd sshd[58119]: Unable to negotiate with 218.92.0.204 port 46837: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:53:58 angussyd sshd[85383]: Unable to negotiate with 218.92.0.204 port 61990: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:54:50 angussyd sshd[12255]: Unable to negotiate with 218.92.0.204 port 16608: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:55:40 angussyd sshd[38906]: Unable to negotiate with 218.92.0.204 port 26417: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:55:56 angussyd sshd[39126]: Invalid user gopher from 206.189.136.160 port 35706 May 29 10:55:56 angussyd sshguard[69778]: Attack from "206.189.136.160" on service 100 with danger 10. May 29 10:55:56 angussyd sshd[39126]: user NOUSER login class [preauth] May 29 10:55:56 angussyd sshd[39126]: Received disconnect from 206.189.136.160 port 35706:11: Normal Shutdown, Thank you for playing [preauth] May 29 10:55:56 angussyd sshd[39126]: Disconnected from invalid user gopher 206.189.136.160 port 35706 [preauth] May 29 10:55:56 angussyd sshguard[69778]: Attack from "206.189.136.160" on service 100 with danger 10. May 29 10:56:32 angussyd sshd[64534]: Unable to negotiate with 218.92.0.204 port 41382: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:57:21 angussyd sshd[82123]: Unable to negotiate with 218.92.0.204 port 58227: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:58:11 angussyd sshd[90341]: Unable to negotiate with 218.92.0.204 port 57318: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 10:59:10 angussyd sshd[16386]: Unable to negotiate with 218.92.0.204 port 41260: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:00:15 angussyd sshd[45714]: Unable to negotiate with 218.92.0.204 port 62230: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:01:09 angussyd sshd[69181]: Unable to negotiate with 218.92.0.204 port 14704: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:02:09 angussyd sshd[94198]: Unable to negotiate with 218.92.0.204 port 61419: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:03:19 angussyd sshd[17459]: Unable to negotiate with 218.92.0.204 port 14011: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:04:09 angussyd sshd[43578]: Connection closed by 185.94.197.115 port 60856 [preauth] May 29 11:04:09 angussyd sshguard[69778]: Attack from "185.94.197.115" on service 100 with danger 10. May 29 11:04:19 angussyd sshd[44292]: Unable to negotiate with 218.92.0.204 port 49384: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:04:49 angussyd sshd[71202]: Invalid user ftp from 159.65.144.233 port 15332 May 29 11:04:49 angussyd sshguard[69778]: Attack from "159.65.144.233" on service 100 with danger 10. May 29 11:04:49 angussyd sshd[71202]: user NOUSER login class [preauth] May 29 11:04:50 angussyd sshd[71202]: Received disconnect from 159.65.144.233 port 15332:11: Normal Shutdown, Thank you for playing [preauth] May 29 11:04:50 angussyd sshd[71202]: Disconnected from invalid user ftp 159.65.144.233 port 15332 [preauth] May 29 11:04:50 angussyd sshguard[69778]: Attack from "159.65.144.233" on service 100 with danger 10. May 29 11:05:24 angussyd sshd[71733]: Unable to negotiate with 218.92.0.204 port 13665: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:06:20 angussyd sshd[96920]: Unable to negotiate with 218.92.0.204 port 20908: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:07:17 angussyd sshd[22585]: Unable to negotiate with 218.92.0.204 port 58033: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:08:07 angussyd sshd[48597]: Unable to negotiate with 218.92.0.204 port 54938: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:09:00 angussyd sshd[74988]: Unable to negotiate with 218.92.0.204 port 27424: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:09:57 angussyd sshd[811]: Unable to negotiate with 218.92.0.204 port 62243: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:10:50 angussyd sshd[25775]: Unable to negotiate with 218.92.0.204 port 22569: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:11:44 angussyd sshd[52045]: Unable to negotiate with 218.92.0.204 port 47758: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:12:42 angussyd sshd[78644]: Unable to negotiate with 218.92.0.204 port 22546: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:13:39 angussyd sshd[79124]: Unable to negotiate with 218.92.0.204 port 12206: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:14:33 angussyd sshd[3872]: Unable to negotiate with 218.92.0.204 port 32411: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:15:22 angussyd sshd[31304]: Unable to negotiate with 218.92.0.204 port 30058: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:16:22 angussyd sshd[57046]: Unable to negotiate with 218.92.0.204 port 61801: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:17:17 angussyd sshd[83636]: Unable to negotiate with 218.92.0.204 port 46593: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:18:10 angussyd sshd[7337]: Unable to negotiate with 218.92.0.204 port 61818: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:19:04 angussyd sshd[34067]: Unable to negotiate with 218.92.0.204 port 18478: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:19:58 angussyd sshd[60122]: Unable to negotiate with 218.92.0.204 port 25927: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:20:54 angussyd sshd[84832]: Unable to negotiate with 218.92.0.204 port 10231: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:21:44 angussyd sshd[85054]: Unable to negotiate with 218.92.0.204 port 64855: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:22:37 angussyd sshd[10873]: Unable to negotiate with 218.92.0.204 port 32639: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:23:33 angussyd sshd[37040]: Unable to negotiate with 218.92.0.204 port 59918: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:24:29 angussyd sshd[63376]: Unable to negotiate with 218.92.0.204 port 40020: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:25:22 angussyd sshd[88054]: Unable to negotiate with 218.92.0.204 port 54331: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:26:16 angussyd sshd[13612]: Unable to negotiate with 218.92.0.204 port 13159: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:27:19 angussyd sshd[38692]: Unable to negotiate with 218.92.0.204 port 14203: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:28:29 angussyd sshd[65092]: Unable to negotiate with 218.92.0.204 port 12170: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:29:35 angussyd sshd[91661]: Unable to negotiate with 218.92.0.204 port 32654: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:30:20 angussyd sshd[18294]: Invalid user pi from 91.168.205.104 port 4647 May 29 11:30:20 angussyd sshguard[69778]: Attack from "91.168.205.104" on service 100 with danger 10. May 29 11:30:20 angussyd sshd[18294]: user NOUSER login class [preauth] May 29 11:30:20 angussyd sshd[18163]: Invalid user pi from 91.168.205.104 port 4594 May 29 11:30:20 angussyd sshguard[69778]: Attack from "91.168.205.104" on service 100 with danger 10. May 29 11:30:20 angussyd sshd[18163]: user NOUSER login class [preauth] May 29 11:30:20 angussyd sshd[18294]: Connection closed by invalid user pi 91.168.205.104 port 4647 [preauth] May 29 11:30:20 angussyd sshd[18163]: Connection closed by invalid user pi 91.168.205.104 port 4594 [preauth] May 29 11:30:38 angussyd sshd[19024]: Invalid user temp from 206.189.136.160 port 46576 May 29 11:30:38 angussyd sshguard[69778]: Attack from "206.189.136.160" on service 100 with danger 10. May 29 11:30:38 angussyd sshd[19024]: user NOUSER login class [preauth] May 29 11:30:38 angussyd sshd[19024]: Received disconnect from 206.189.136.160 port 46576:11: Normal Shutdown, Thank you for playing [preauth] May 29 11:30:38 angussyd sshd[19024]: Disconnected from invalid user temp 206.189.136.160 port 46576 [preauth] May 29 11:30:38 angussyd sshguard[69778]: Attack from "206.189.136.160" on service 100 with danger 10. May 29 11:30:39 angussyd sshd[19566]: Unable to negotiate with 218.92.0.204 port 40252: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:31:50 angussyd sshd[45201]: Unable to negotiate with 218.92.0.204 port 27529: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:32:52 angussyd sshd[70725]: Unable to negotiate with 218.92.0.204 port 24225: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:34:02 angussyd sshd[97056]: Unable to negotiate with 218.92.0.204 port 10422: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:35:02 angussyd sshd[22087]: Unable to negotiate with 218.92.0.204 port 43445: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:36:03 angussyd sshd[45436]: Unable to negotiate with 218.92.0.204 port 47369: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:37:18 angussyd sshd[94410]: Unable to negotiate with 218.92.0.204 port 22315: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:38:13 angussyd sshd[12862]: Unable to negotiate with 218.92.0.204 port 27858: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:39:15 angussyd sshd[39509]: Unable to negotiate with 218.92.0.204 port 22850: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:40:12 angussyd sshd[47876]: Unable to negotiate with 218.92.0.204 port 59615: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:41:14 angussyd sshd[73515]: Unable to negotiate with 218.92.0.204 port 11684: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:42:16 angussyd sshd[96712]: Unable to negotiate with 218.92.0.204 port 60877: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:43:18 angussyd sshd[22871]: Unable to negotiate with 218.92.0.204 port 16290: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:44:19 angussyd sshd[48120]: Unable to negotiate with 218.92.0.204 port 43611: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:45:25 angussyd sshd[99362]: Unable to negotiate with 218.92.0.204 port 11462: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:46:25 angussyd sshd[26185]: Unable to negotiate with 218.92.0.204 port 60403: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:47:25 angussyd sshd[50259]: Unable to negotiate with 218.92.0.204 port 51765: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:48:29 angussyd sshd[73603]: Unable to negotiate with 218.92.0.204 port 57845: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:49:39 angussyd sshd[99210]: Unable to negotiate with 218.92.0.204 port 44184: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:50:40 angussyd sshd[27001]: Unable to negotiate with 218.92.0.204 port 37492: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:51:08 angussyd sshd[27500]: user admin login class [preauth] May 29 11:51:08 angussyd sshd[27500]: Received disconnect from 51.75.169.236 port 34985:11: Normal Shutdown, Thank you for playing [preauth] May 29 11:51:08 angussyd sshd[27500]: Disconnected from authenticating user admin 51.75.169.236 port 34985 [preauth] May 29 11:51:08 angussyd sshguard[69778]: Attack from "51.75.169.236" on service 100 with danger 10. May 29 11:51:52 angussyd sshd[54350]: Unable to negotiate with 218.92.0.204 port 40305: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:52:55 angussyd sshd[78575]: Unable to negotiate with 218.92.0.204 port 58521: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:53:52 angussyd sshd[3983]: Unable to negotiate with 218.92.0.204 port 40381: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:54:55 angussyd sshd[29310]: Unable to negotiate with 218.92.0.204 port 51675: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:55:54 angussyd sshd[54053]: Unable to negotiate with 218.92.0.204 port 14445: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:56:56 angussyd sshd[82058]: Unable to negotiate with 218.92.0.204 port 12197: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:58:01 angussyd sshd[7128]: Unable to negotiate with 218.92.0.204 port 30781: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 11:59:08 angussyd sshd[33754]: Unable to negotiate with 218.92.0.204 port 63323: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:00:09 angussyd sshd[61929]: Unable to negotiate with 218.92.0.204 port 15022: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:01:04 angussyd sshd[87891]: Unable to negotiate with 218.92.0.204 port 36767: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:02:03 angussyd sshd[15287]: Unable to negotiate with 218.92.0.204 port 18969: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:02:07 angussyd sshd[15502]: Received disconnect from 159.65.151.151 port 36050:11: Bye Bye [preauth] May 29 12:02:07 angussyd sshd[15502]: Disconnected from 159.65.151.151 port 36050 [preauth] May 29 12:02:07 angussyd sshguard[69778]: Attack from "159.65.151.151" on service 100 with danger 10. May 29 12:03:02 angussyd sshd[42183]: Unable to negotiate with 218.92.0.204 port 56640: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:03:59 angussyd sshd[68970]: Unable to negotiate with 218.92.0.204 port 36134: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:05:02 angussyd sshd[94856]: Unable to negotiate with 218.92.0.204 port 50228: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:05:58 angussyd sshd[19954]: Unable to negotiate with 218.92.0.204 port 20832: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:06:59 angussyd sshd[44899]: Unable to negotiate with 218.92.0.204 port 11900: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:07:57 angussyd sshd[70533]: Unable to negotiate with 218.92.0.204 port 55663: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:09:04 angussyd sshd[98074]: Unable to negotiate with 218.92.0.204 port 26922: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:10:01 angussyd sshd[24814]: Unable to negotiate with 218.92.0.204 port 47635: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:10:58 angussyd sshd[50659]: Unable to negotiate with 218.92.0.204 port 21053: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:11:55 angussyd sshd[70207]: Unable to negotiate with 218.92.0.204 port 56952: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:12:55 angussyd sshd[77405]: Unable to negotiate with 218.92.0.204 port 50410: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:13:57 angussyd sshd[3472]: Unable to negotiate with 218.92.0.204 port 49120: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:14:54 angussyd sshd[29441]: Unable to negotiate with 218.92.0.204 port 36008: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:15:57 angussyd sshd[54055]: Unable to negotiate with 218.92.0.204 port 41182: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:16:57 angussyd sshd[80117]: Unable to negotiate with 218.92.0.204 port 28318: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:17:52 angussyd sshd[5423]: Unable to negotiate with 218.92.0.204 port 54237: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:18:45 angussyd sshd[32160]: Unable to negotiate with 218.92.0.204 port 20843: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:19:46 angussyd sshd[57098]: Unable to negotiate with 218.92.0.204 port 52062: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:20:46 angussyd sshd[85128]: Unable to negotiate with 218.92.0.204 port 56908: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:21:44 angussyd sshd[12669]: Unable to negotiate with 218.92.0.204 port 41252: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:22:46 angussyd sshd[37114]: Unable to negotiate with 218.92.0.204 port 21534: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:23:50 angussyd sshd[62674]: Unable to negotiate with 218.92.0.204 port 39908: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:24:44 angussyd sshd[88329]: Unable to negotiate with 218.92.0.204 port 62459: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:25:36 angussyd sshd[13881]: Unable to negotiate with 218.92.0.204 port 21537: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:26:32 angussyd sshd[39210]: Unable to negotiate with 218.92.0.204 port 44944: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:27:30 angussyd sshd[63529]: Unable to negotiate with 218.92.0.204 port 33382: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:28:22 angussyd sshd[90016]: Unable to negotiate with 218.92.0.204 port 41853: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:29:19 angussyd sshd[16971]: Unable to negotiate with 218.92.0.204 port 11189: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:30:28 angussyd sshd[43320]: Unable to negotiate with 218.92.0.204 port 18935: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:31:29 angussyd sshd[70032]: Unable to negotiate with 218.92.0.204 port 34853: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:32:26 angussyd sshd[93671]: Unable to negotiate with 218.92.0.204 port 17327: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:33:28 angussyd sshd[17754]: Unable to negotiate with 218.92.0.204 port 12289: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:34:26 angussyd sshd[44116]: Unable to negotiate with 218.92.0.204 port 56320: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:35:19 angussyd sshd[44599]: Unable to negotiate with 218.92.0.204 port 12968: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:36:09 angussyd sshd[71260]: Unable to negotiate with 218.92.0.204 port 19211: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:37:06 angussyd sshd[95364]: Unable to negotiate with 218.92.0.204 port 37882: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:37:06 angussyd sshd[95037]: Invalid user oracle1 from 146.185.149.245 port 48130 May 29 12:37:06 angussyd sshguard[69778]: Attack from "146.185.149.245" on service 100 with danger 10. May 29 12:37:06 angussyd sshd[95037]: user NOUSER login class [preauth] May 29 12:37:07 angussyd sshd[95037]: Received disconnect from 146.185.149.245 port 48130:11: Normal Shutdown, Thank you for playing [preauth] May 29 12:37:07 angussyd sshd[95037]: Disconnected from invalid user oracle1 146.185.149.245 port 48130 [preauth] May 29 12:37:07 angussyd sshguard[69778]: Attack from "146.185.149.245" on service 100 with danger 10. May 29 12:38:11 angussyd sshd[20671]: Unable to negotiate with 218.92.0.204 port 61210: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:39:11 angussyd sshd[45301]: Unable to negotiate with 218.92.0.204 port 59782: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:40:22 angussyd sshd[72145]: Unable to negotiate with 218.92.0.204 port 61675: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:41:37 angussyd sshd[23322]: Unable to negotiate with 218.92.0.204 port 22361: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:42:40 angussyd sshd[47770]: Unable to negotiate with 218.92.0.204 port 35413: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:43:35 angussyd sshd[67724]: Unable to negotiate with 218.92.0.204 port 54750: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:43:40 angussyd sshd[75926]: Connection closed by 182.254.195.94 port 57538 [preauth] May 29 12:43:40 angussyd sshguard[69778]: Attack from "182.254.195.94" on service 100 with danger 10. May 29 12:44:32 angussyd sshd[76737]: Unable to negotiate with 218.92.0.204 port 30142: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:45:23 angussyd sshd[1970]: Unable to negotiate with 218.92.0.204 port 42653: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:45:44 angussyd sshd[28564]: user root login class [preauth] May 29 12:45:44 angussyd sshd[28564]: Received disconnect from 142.93.39.29 port 60248:11: Normal Shutdown, Thank you for playing [preauth] May 29 12:45:44 angussyd sshd[28564]: Disconnected from authenticating user root 142.93.39.29 port 60248 [preauth] May 29 12:45:44 angussyd sshguard[69778]: Attack from "142.93.39.29" on service 100 with danger 10. May 29 12:46:15 angussyd sshd[28888]: Unable to negotiate with 218.92.0.204 port 51940: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:47:15 angussyd sshd[53658]: Unable to negotiate with 218.92.0.204 port 38694: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:48:29 angussyd sshd[78902]: Unable to negotiate with 218.92.0.204 port 44729: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:49:33 angussyd sshd[3386]: Unable to negotiate with 218.92.0.204 port 59773: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:50:47 angussyd sshd[55576]: Unable to negotiate with 218.92.0.204 port 35191: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:52:01 angussyd sshd[82867]: Unable to negotiate with 218.92.0.204 port 52442: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:53:13 angussyd sshd[8757]: Unable to negotiate with 218.92.0.204 port 13520: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:54:18 angussyd sshd[35952]: Unable to negotiate with 218.92.0.204 port 14116: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:55:28 angussyd sshd[60281]: Unable to negotiate with 218.92.0.204 port 59300: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:56:33 angussyd sshd[84109]: Unable to negotiate with 218.92.0.204 port 30345: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:57:32 angussyd sshd[9364]: Unable to negotiate with 218.92.0.204 port 12437: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:58:32 angussyd sshd[34016]: Unable to negotiate with 218.92.0.204 port 60848: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 12:59:29 angussyd sshd[58845]: Unable to negotiate with 218.92.0.204 port 29544: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:00:23 angussyd sshd[86468]: Unable to negotiate with 218.92.0.204 port 47023: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:01:17 angussyd sshd[13215]: Connection closed by 192.144.130.62 port 37214 [preauth] May 29 13:01:17 angussyd sshguard[69778]: Attack from "192.144.130.62" on service 100 with danger 10. May 29 13:01:21 angussyd sshd[13705]: Unable to negotiate with 218.92.0.204 port 21831: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:02:27 angussyd sshd[40418]: Unable to negotiate with 218.92.0.204 port 52039: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:03:32 angussyd sshd[66972]: Unable to negotiate with 218.92.0.204 port 19900: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:04:35 angussyd sshd[91272]: Unable to negotiate with 218.92.0.204 port 35640: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:05:37 angussyd sshd[17941]: Unable to negotiate with 218.92.0.204 port 30624: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:06:30 angussyd sshd[41090]: Unable to negotiate with 218.92.0.204 port 52021: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:07:20 angussyd sshd[66837]: Unable to negotiate with 218.92.0.204 port 58240: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:08:11 angussyd sshd[95693]: Unable to negotiate with 218.92.0.204 port 16614: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:09:00 angussyd sshd[96082]: Unable to negotiate with 218.92.0.204 port 31571: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:09:00 angussyd sshd[96650]: Unable to negotiate with 113.17.17.42 port 45084: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth] May 29 13:09:00 angussyd sshguard[69778]: Attack from "113.17.17.42" on service 100 with danger 10. May 29 13:09:46 angussyd sshd[23520]: Unable to negotiate with 218.92.0.204 port 29098: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:10:36 angussyd sshd[48628]: Unable to negotiate with 218.92.0.204 port 46905: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:11:26 angussyd sshd[73305]: Unable to negotiate with 218.92.0.204 port 54100: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:11:26 angussyd sshd[73598]: Did not receive identification string from 167.99.38.73 port 51201 May 29 13:12:22 angussyd sshd[1038]: Unable to negotiate with 218.92.0.204 port 32468: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:13:19 angussyd sshd[26161]: Unable to negotiate with 218.92.0.204 port 15472: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:14:21 angussyd sshd[50647]: Unable to negotiate with 218.92.0.204 port 35842: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:15:17 angussyd sshd[76782]: Unable to negotiate with 218.92.0.204 port 14396: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:16:08 angussyd sshd[77100]: Unable to negotiate with 218.92.0.204 port 13121: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:17:04 angussyd sshd[1431]: Unable to negotiate with 218.92.0.204 port 47956: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:18:00 angussyd sshd[24420]: Unable to negotiate with 218.92.0.204 port 22246: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:18:58 angussyd sshd[50943]: Unable to negotiate with 218.92.0.204 port 56463: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:19:22 angussyd sshd[51416]: Invalid user ftpuser from 181.30.45.227 port 50065 May 29 13:19:22 angussyd sshguard[69778]: Attack from "181.30.45.227" on service 100 with danger 10. May 29 13:19:22 angussyd sshd[51416]: user NOUSER login class [preauth] May 29 13:19:22 angussyd sshd[51416]: Received disconnect from 181.30.45.227 port 50065:11: Normal Shutdown, Thank you for playing [preauth] May 29 13:19:22 angussyd sshd[51416]: Disconnected from invalid user ftpuser 181.30.45.227 port 50065 [preauth] May 29 13:19:22 angussyd sshguard[69778]: Attack from "181.30.45.227" on service 100 with danger 10. May 29 13:19:56 angussyd sshd[78588]: Unable to negotiate with 218.92.0.204 port 38493: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:20:47 angussyd sshd[4230]: Unable to negotiate with 218.92.0.204 port 53710: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:21:37 angussyd sshd[30028]: Unable to negotiate with 218.92.0.204 port 12500: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:22:26 angussyd sshd[55751]: Unable to negotiate with 218.92.0.204 port 25125: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:23:17 angussyd sshd[56052]: Unable to negotiate with 218.92.0.204 port 41244: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:24:17 angussyd sshd[82603]: Unable to negotiate with 218.92.0.204 port 24132: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:25:27 angussyd sshd[25838]: Unable to negotiate with 218.92.0.204 port 47479: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:26:37 angussyd sshd[59522]: Unable to negotiate with 218.92.0.204 port 42694: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:28:00 angussyd sshd[86544]: Unable to negotiate with 218.92.0.204 port 21373: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:29:07 angussyd sshd[13159]: Unable to negotiate with 218.92.0.204 port 49725: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:30:14 angussyd sshd[40366]: Unable to negotiate with 218.92.0.204 port 51886: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:31:14 angussyd sshd[66284]: Unable to negotiate with 218.92.0.204 port 36014: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:32:13 angussyd sshd[92477]: Unable to negotiate with 218.92.0.204 port 64933: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:33:05 angussyd sshd[18188]: Unable to negotiate with 218.92.0.204 port 25101: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:33:57 angussyd sshd[43884]: Unable to negotiate with 218.92.0.204 port 37456: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:34:46 angussyd sshd[67534]: Unable to negotiate with 218.92.0.204 port 49217: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:35:33 angussyd sshd[67730]: Unable to negotiate with 218.92.0.204 port 54798: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:36:21 angussyd sshd[92756]: Unable to negotiate with 218.92.0.204 port 57637: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:37:09 angussyd sshd[18643]: Unable to negotiate with 218.92.0.204 port 64910: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:37:59 angussyd sshd[44586]: Unable to negotiate with 218.92.0.204 port 33822: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:38:48 angussyd sshd[69445]: Unable to negotiate with 218.92.0.204 port 41511: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:39:37 angussyd sshd[69717]: Unable to negotiate with 218.92.0.204 port 54356: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:40:30 angussyd sshd[95834]: Unable to negotiate with 218.92.0.204 port 12074: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:41:31 angussyd sshd[20501]: Unable to negotiate with 218.92.0.204 port 50377: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:42:33 angussyd sshd[45376]: Unable to negotiate with 218.92.0.204 port 24748: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:43:38 angussyd sshd[72411]: Unable to negotiate with 218.92.0.204 port 47784: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:44:44 angussyd sshd[99341]: Unable to negotiate with 218.92.0.204 port 20535: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:44:49 angussyd sshd[99658]: Invalid user mysql from 206.189.188.223 port 49472 May 29 13:44:49 angussyd sshguard[69778]: Attack from "206.189.188.223" on service 100 with danger 10. May 29 13:44:49 angussyd sshd[99658]: user NOUSER login class [preauth] May 29 13:44:50 angussyd sshd[99658]: Received disconnect from 206.189.188.223 port 49472:11: Normal Shutdown, Thank you for playing [preauth] May 29 13:44:50 angussyd sshd[99658]: Disconnected from invalid user mysql 206.189.188.223 port 49472 [preauth] May 29 13:44:50 angussyd sshguard[69778]: Attack from "206.189.188.223" on service 100 with danger 10. May 29 13:45:44 angussyd sshd[26359]: Unable to negotiate with 218.92.0.204 port 11429: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:47:03 angussyd sshd[76376]: Unable to negotiate with 218.92.0.204 port 61139: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:48:14 angussyd sshd[3842]: Unable to negotiate with 218.92.0.204 port 57586: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:49:25 angussyd sshd[31108]: Unable to negotiate with 218.92.0.204 port 46758: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:50:41 angussyd sshd[58778]: Unable to negotiate with 218.92.0.204 port 35310: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:51:45 angussyd sshd[82363]: Unable to negotiate with 218.92.0.204 port 55688: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:52:39 angussyd sshd[8685]: Unable to negotiate with 218.92.0.204 port 64919: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:53:37 angussyd sshd[33489]: Unable to negotiate with 218.92.0.204 port 35047: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:54:35 angussyd sshd[56539]: Unable to negotiate with 218.92.0.204 port 49725: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:55:32 angussyd sshd[82591]: Unable to negotiate with 218.92.0.204 port 30341: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:56:22 angussyd sshd[8147]: Unable to negotiate with 218.92.0.204 port 30786: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:57:14 angussyd sshd[32657]: Unable to negotiate with 218.92.0.204 port 47459: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:58:06 angussyd sshd[32988]: Unable to negotiate with 218.92.0.204 port 10559: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:58:58 angussyd sshd[59719]: Unable to negotiate with 218.92.0.204 port 25032: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 13:59:51 angussyd sshd[86796]: Unable to negotiate with 218.92.0.204 port 34785: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:00:49 angussyd sshd[12713]: Unable to negotiate with 218.92.0.204 port 55368: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:02:09 angussyd sshd[39116]: Unable to negotiate with 218.92.0.204 port 40708: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:03:35 angussyd sshd[92988]: Unable to negotiate with 218.92.0.204 port 58610: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:05:00 angussyd sshd[21602]: Unable to negotiate with 218.92.0.204 port 52984: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:06:27 angussyd sshd[69409]: Unable to negotiate with 218.92.0.204 port 38751: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:07:22 angussyd sshd[94055]: Unable to negotiate with 218.92.0.204 port 41708: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:07:39 angussyd sshd[94470]: Received disconnect from 134.209.175.199 port 47522:11: Bye Bye [preauth] May 29 14:07:39 angussyd sshd[94470]: Disconnected from 134.209.175.199 port 47522 [preauth] May 29 14:07:39 angussyd sshguard[69778]: Attack from "134.209.175.199" on service 100 with danger 10. May 29 14:08:20 angussyd sshd[97975]: Unable to negotiate with 218.92.0.204 port 21846: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:09:12 angussyd sshd[23650]: Unable to negotiate with 218.92.0.204 port 31701: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:09:59 angussyd sshd[48370]: Unable to negotiate with 218.92.0.204 port 23952: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:10:51 angussyd sshd[74647]: Unable to negotiate with 218.92.0.204 port 46385: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:11:41 angussyd sshd[1448]: Unable to negotiate with 218.92.0.204 port 57500: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:12:39 angussyd sshd[25674]: Unable to negotiate with 218.92.0.204 port 22634: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:13:49 angussyd sshd[50346]: Unable to negotiate with 218.92.0.204 port 53648: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:16:47 angussyd sshd[27000]: Invalid user carlos from 68.183.161.60 port 54234 May 29 14:16:47 angussyd sshguard[69778]: Attack from "68.183.161.60" on service 100 with danger 10. May 29 14:16:47 angussyd sshd[27000]: user NOUSER login class [preauth] May 29 14:16:47 angussyd sshd[27000]: Received disconnect from 68.183.161.60 port 54234:11: Normal Shutdown, Thank you for playing [preauth] May 29 14:16:47 angussyd sshd[27000]: Disconnected from invalid user carlos 68.183.161.60 port 54234 [preauth] May 29 14:16:47 angussyd sshguard[69778]: Attack from "68.183.161.60" on service 100 with danger 10. May 29 14:17:35 angussyd sshd[50440]: Unable to negotiate with 218.92.0.204 port 16418: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:18:47 angussyd sshd[75594]: Unable to negotiate with 218.92.0.204 port 38300: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:19:59 angussyd sshd[99883]: Unable to negotiate with 218.92.0.204 port 52462: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:21:08 angussyd sshd[25758]: Unable to negotiate with 218.92.0.204 port 40459: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:22:17 angussyd sshd[50652]: Unable to negotiate with 218.92.0.204 port 45777: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:23:43 angussyd sshd[4333]: Unable to negotiate with 218.92.0.204 port 41909: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:26:20 angussyd sshd[55843]: Unable to negotiate with 218.92.0.204 port 20554: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:27:42 angussyd sshd[82407]: Unable to negotiate with 218.92.0.204 port 55315: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:29:02 angussyd sshd[31731]: Unable to negotiate with 218.92.0.204 port 22015: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:30:12 angussyd sshd[55645]: Unable to negotiate with 218.92.0.204 port 45309: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:30:34 angussyd sshd[56071]: Connection closed by 50.35.67.86 port 36872 [preauth] May 29 14:30:34 angussyd sshguard[69778]: Attack from "50.35.67.86" on service 100 with danger 10. May 29 14:31:17 angussyd sshd[80901]: Unable to negotiate with 218.92.0.204 port 61337: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:32:19 angussyd sshd[8335]: Unable to negotiate with 218.92.0.204 port 47579: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:33:18 angussyd sshd[33940]: Unable to negotiate with 218.92.0.204 port 32285: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:34:16 angussyd sshd[56525]: Unable to negotiate with 218.92.0.204 port 46766: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:35:18 angussyd sshd[82072]: Unable to negotiate with 218.92.0.204 port 36528: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:36:32 angussyd sshd[7572]: Unable to negotiate with 218.92.0.204 port 24209: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:37:52 angussyd sshd[33039]: Unable to negotiate with 218.92.0.204 port 57548: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:39:18 angussyd sshd[83684]: Unable to negotiate with 218.92.0.204 port 10927: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:40:50 angussyd sshd[7923]: Unable to negotiate with 218.92.0.204 port 59807: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:42:02 angussyd sshd[32537]: Unable to negotiate with 218.92.0.204 port 47436: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:42:52 angussyd sshd[58692]: Connection closed by 105.73.80.135 port 10714 [preauth] May 29 14:42:52 angussyd sshguard[69778]: Attack from "105.73.80.135" on service 100 with danger 10. May 29 14:43:14 angussyd sshd[86288]: Unable to negotiate with 218.92.0.204 port 34313: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:44:19 angussyd sshd[12519]: Unable to negotiate with 218.92.0.204 port 40723: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:45:18 angussyd sshd[37492]: Unable to negotiate with 218.92.0.204 port 16669: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:46:14 angussyd sshd[64402]: Unable to negotiate with 218.92.0.204 port 38768: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:47:16 angussyd sshd[91192]: Unable to negotiate with 218.92.0.204 port 27864: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:48:15 angussyd sshd[16631]: Connection closed by 178.128.125.131 port 59086 [preauth] May 29 14:48:15 angussyd sshguard[69778]: Attack from "178.128.125.131" on service 100 with danger 10. May 29 14:48:18 angussyd sshd[16980]: Unable to negotiate with 218.92.0.204 port 19240: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:49:19 angussyd sshd[44279]: Unable to negotiate with 218.92.0.204 port 20178: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:50:16 angussyd sshd[72368]: Unable to negotiate with 218.92.0.204 port 55357: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:51:13 angussyd sshd[72807]: Unable to negotiate with 218.92.0.204 port 40345: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:52:05 angussyd sshd[97625]: Unable to negotiate with 218.92.0.204 port 49794: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:52:58 angussyd sshd[22472]: Unable to negotiate with 218.92.0.204 port 10842: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:53:52 angussyd sshd[47382]: Unable to negotiate with 218.92.0.204 port 30301: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:54:51 angussyd sshd[72751]: Unable to negotiate with 218.92.0.204 port 13435: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:56:52 angussyd sshd[22494]: Invalid user oracle from 167.99.200.84 port 57074 May 29 14:56:52 angussyd sshguard[69778]: Attack from "167.99.200.84" on service 100 with danger 10. May 29 14:56:52 angussyd sshd[22494]: user NOUSER login class [preauth] May 29 14:56:52 angussyd sshd[22494]: Received disconnect from 167.99.200.84 port 57074:11: Normal Shutdown, Thank you for playing [preauth] May 29 14:56:52 angussyd sshd[22494]: Disconnected from invalid user oracle 167.99.200.84 port 57074 [preauth] May 29 14:56:52 angussyd sshguard[69778]: Attack from "167.99.200.84" on service 100 with danger 10. May 29 14:58:51 angussyd sshd[74515]: Connection closed by 140.143.130.52 port 57530 [preauth] May 29 14:58:51 angussyd sshguard[69778]: Attack from "140.143.130.52" on service 100 with danger 10. May 29 14:59:11 angussyd sshd[74653]: Invalid user ftp from 167.99.75.174 port 34510 May 29 14:59:11 angussyd sshguard[69778]: Attack from "167.99.75.174" on service 100 with danger 10. May 29 14:59:11 angussyd sshd[74653]: user NOUSER login class [preauth] May 29 14:59:11 angussyd sshd[74653]: Received disconnect from 167.99.75.174 port 34510:11: Normal Shutdown, Thank you for playing [preauth] May 29 14:59:11 angussyd sshd[74653]: Disconnected from invalid user ftp 167.99.75.174 port 34510 [preauth] May 29 14:59:11 angussyd sshguard[69778]: Attack from "167.99.75.174" on service 100 with danger 10. May 29 14:59:24 angussyd sshd[75001]: Invalid user oracle from 174.138.56.93 port 44330 May 29 14:59:24 angussyd sshguard[69778]: Attack from "174.138.56.93" on service 100 with danger 10. May 29 14:59:24 angussyd sshd[75001]: user NOUSER login class [preauth] May 29 14:59:25 angussyd sshd[75001]: Received disconnect from 174.138.56.93 port 44330:11: Normal Shutdown, Thank you for playing [preauth] May 29 14:59:25 angussyd sshd[75001]: Disconnected from invalid user oracle 174.138.56.93 port 44330 [preauth] May 29 14:59:25 angussyd sshguard[69778]: Attack from "174.138.56.93" on service 100 with danger 10. May 29 14:59:45 angussyd sshd[647]: Unable to negotiate with 218.92.0.209 port 58905: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 14:59:45 angussyd sshguard[69778]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:00:40 angussyd sshd[27465]: Unable to negotiate with 218.92.0.209 port 50775: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:00:40 angussyd sshguard[69778]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:01:29 angussyd sshd[54493]: Unable to negotiate with 218.92.0.209 port 12117: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:01:29 angussyd sshguard[69778]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:01:29 angussyd sshguard[69778]: Blocking "218.92.0.209/32" for 61440 secs (3 attacks in 104 secs, after 10 abuses over 1296335 secs.) May 29 15:27:34 angussyd sshd[87903]: Connection closed by 120.211.22.164 port 52852 [preauth] May 29 15:27:34 angussyd sshguard[69778]: Attack from "120.211.22.164" on service 100 with danger 10. May 29 15:31:41 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:31:41 angussyd kernel: e6000sw0port2: link state changed to UP May 29 15:31:42 angussyd check_reload_status: Reloading filter May 29 15:34:43 angussyd php-fpm[5441]: /index.php: Successful login for user 'admin' from: 192.168.1.100 (Local Database) May 29 15:35:11 angussyd check_reload_status: Syncing firewall May 29 15:37:06 angussyd pkg-static: pfSense-rc upgraded: 2.4.4_2 -> 2.4.4_3 May 29 15:37:09 angussyd pkg-static: pfSense-kernel-pfSense upgraded: 2.4.4_2 -> 2.4.4_3 May 29 15:37:11 angussyd check_reload_status: Reloading filter May 29 15:37:11 angussyd check_reload_status: Starting packages May 29 15:37:12 angussyd php-fpm[79764]: /rc.start_packages: Restarting/Starting all packages. May 29 15:37:21 angussyd reboot: rebooted by root May 29 15:37:21 angussyd syslogd: exiting on signal 15 May 29 15:38:19 angussyd syslogd: kernel boot file is /boot/kernel/kernel May 29 15:38:19 angussyd kernel: Copyright (c) 1992-2018 The FreeBSD Project. May 29 15:38:19 angussyd kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 May 29 15:38:19 angussyd kernel: The Regents of the University of California. All rights reserved. May 29 15:38:19 angussyd kernel: FreeBSD is a registered trademark of The FreeBSD Foundation. May 29 15:38:19 angussyd kernel: FreeBSD 11.2-RELEASE-p10 #9 10fea60fdde(factory-RELENG_2_4_4): Thu May 16 06:55:01 EDT 2019 May 29 15:38:19 angussyd kernel: root@buildbot1-nyi.netgate.com:/build/factory-crossbuild-244/obj/amd64/bwlyKhYx/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/sys/pfSense amd64 May 29 15:38:19 angussyd kernel: FreeBSD clang version 6.0.0 (tags/RELEASE_600/final 326565) (based on LLVM 6.0.0) May 29 15:38:19 angussyd kernel: VT(vga): resolution 640x480 May 29 15:38:19 angussyd kernel: CPU: Intel(R) Atom(TM) CPU C3558 @ 2.20GHz (2200.07-MHz K8-class CPU) May 29 15:38:19 angussyd kernel: Origin="GenuineIntel" Id=0x506f1 Family=0x6 Model=0x5f Stepping=1 May 29 15:38:19 angussyd kernel: Features=0xbfebfbff May 29 15:38:19 angussyd kernel: Features2=0x4ff8ebbf May 29 15:38:19 angussyd kernel: AMD Features=0x2c100800 May 29 15:38:19 angussyd kernel: AMD Features2=0x101 May 29 15:38:19 angussyd kernel: Structured Extended Features=0x2294e283 May 29 15:38:19 angussyd kernel: Structured Extended Features3=0x2c000000 May 29 15:38:19 angussyd kernel: XSAVE Features=0xf May 29 15:38:19 angussyd kernel: IA32_ARCH_CAPS=0x1 May 29 15:38:19 angussyd kernel: VT-x: (disabled in BIOS) PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr May 29 15:38:19 angussyd kernel: TSC: P-state invariant, performance statistics May 29 15:38:19 angussyd kernel: real memory = 10737418240 (10240 MB) May 29 15:38:19 angussyd kernel: avail memory = 8204009472 (7823 MB) May 29 15:38:19 angussyd kernel: Event timer "LAPIC" quality 600 May 29 15:38:19 angussyd kernel: ACPI APIC Table: May 29 15:38:19 angussyd kernel: WARNING: L1 data cache covers less APIC IDs than a core May 29 15:38:19 angussyd kernel: 0 < 1 May 29 15:38:19 angussyd kernel: FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs May 29 15:38:19 angussyd kernel: FreeBSD/SMP: 1 package(s) x 4 core(s) May 29 15:38:19 angussyd kernel: ioapic0: Changing APIC ID to 2 May 29 15:38:19 angussyd kernel: ioapic0 irqs 0-23 on motherboard May 29 15:38:19 angussyd kernel: SMP: AP CPU #1 Launched! May 29 15:38:19 angussyd kernel: SMP: AP CPU #2 Launched! May 29 15:38:19 angussyd kernel: SMP: AP CPU #3 Launched! May 29 15:38:19 angussyd kernel: Timecounter "TSC-low" frequency 1100035731 Hz quality 1000 May 29 15:38:19 angussyd kernel: ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 15:38:19 angussyd kernel: ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 15:38:19 angussyd kernel: module_register_init: MOD_LOAD (ipw_bss_fw, 0xffffffff80685700, 0) error 1 May 29 15:38:19 angussyd kernel: random: entropy device external interface May 29 15:38:19 angussyd kernel: ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 15:38:19 angussyd kernel: ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 15:38:19 angussyd kernel: module_register_init: MOD_LOAD (ipw_ibss_fw, 0xffffffff806857b0, 0) error 1 May 29 15:38:19 angussyd kernel: ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 15:38:19 angussyd kernel: ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 15:38:19 angussyd kernel: module_register_init: MOD_LOAD (ipw_monitor_fw, 0xffffffff80685860, 0) error 1 May 29 15:38:19 angussyd kernel: iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 15:38:19 angussyd kernel: iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 15:38:19 angussyd kernel: module_register_init: MOD_LOAD (iwi_bss_fw, 0xffffffff806ac730, 0) error 1 May 29 15:38:19 angussyd kernel: iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 15:38:19 angussyd kernel: iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 15:38:19 angussyd kernel: module_register_init: MOD_LOAD (iwi_ibss_fw, 0xffffffff806ac7e0, 0) error 1 May 29 15:38:19 angussyd kernel: iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 15:38:19 angussyd kernel: iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 15:38:19 angussyd kernel: module_register_init: MOD_LOAD (iwi_monitor_fw, 0xffffffff806ac890, 0) error 1 May 29 15:38:19 angussyd kernel: wlan: mac acl policy registered May 29 15:38:19 angussyd kernel: kbd0 at kbdmux0 May 29 15:38:19 angussyd kernel: netmap: loaded module May 29 15:38:19 angussyd kernel: module_register_init: MOD_LOAD (vesa, 0xffffffff8120faa0, 0) error 19 May 29 15:38:19 angussyd kernel: random: registering fast source Intel Secure Key RNG May 29 15:38:19 angussyd kernel: random: fast provider: "Intel Secure Key RNG" May 29 15:38:19 angussyd kernel: nexus0 May 29 15:38:19 angussyd kernel: vtvga0: on motherboard May 29 15:38:19 angussyd kernel: cryptosoft0: on motherboard May 29 15:38:19 angussyd kernel: padlock0: No ACE support. May 29 15:38:19 angussyd kernel: acpi0: on motherboard May 29 15:38:19 angussyd kernel: acpi0: Power Button (fixed) May 29 15:38:19 angussyd kernel: hpet0: iomem 0xfed00000-0xfed003ff on acpi0 May 29 15:38:19 angussyd kernel: Timecounter "HPET" frequency 24000000 Hz quality 950 May 29 15:38:19 angussyd kernel: Event timer "HPET" frequency 24000000 Hz quality 550 May 29 15:38:19 angussyd kernel: Event timer "HPET1" frequency 24000000 Hz quality 440 May 29 15:38:19 angussyd kernel: Event timer "HPET2" frequency 24000000 Hz quality 440 May 29 15:38:19 angussyd kernel: Event timer "HPET3" frequency 24000000 Hz quality 440 May 29 15:38:19 angussyd kernel: Event timer "HPET4" frequency 24000000 Hz quality 440 May 29 15:38:19 angussyd kernel: cpu0: on acpi0 May 29 15:38:19 angussyd kernel: cpu1: on acpi0 May 29 15:38:19 angussyd kernel: cpu2: on acpi0 May 29 15:38:19 angussyd kernel: cpu3: on acpi0 May 29 15:38:19 angussyd kernel: atrtc0: port 0x70-0x77 on acpi0 May 29 15:38:19 angussyd kernel: atrtc0: Warning: Couldn't map I/O. May 29 15:38:19 angussyd kernel: atrtc0: registered as a time-of-day clock, resolution 1.000000s May 29 15:38:19 angussyd kernel: Event timer "RTC" frequency 32768 Hz quality 0 May 29 15:38:19 angussyd kernel: attimer0: port 0x40-0x43,0x50-0x53 irq 0 on acpi0 May 29 15:38:19 angussyd kernel: Timecounter "i8254" frequency 1193182 Hz quality 0 May 29 15:38:19 angussyd kernel: Event timer "i8254" frequency 1193182 Hz quality 100 May 29 15:38:19 angussyd kernel: Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 May 29 15:38:19 angussyd kernel: acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1808-0x180b on acpi0 May 29 15:38:19 angussyd kernel: acpi_button0: on acpi0 May 29 15:38:19 angussyd kernel: pcib0: port 0xcf8-0xcff on acpi0 May 29 15:38:19 angussyd kernel: pci0: on pcib0 May 29 15:38:19 angussyd kernel: pcib1: irq 18 at device 6.0 on pci0 May 29 15:38:19 angussyd kernel: pci1: on pcib1 May 29 15:38:19 angussyd kernel: pci1: at device 0.0 (no driver attached) May 29 15:38:19 angussyd kernel: pcib2: mem 0xdfe00000-0xdfe1ffff irq 20 at device 14.0 on pci0 May 29 15:38:19 angussyd kernel: pci2: on pcib2 May 29 15:38:19 angussyd kernel: pcib3: mem 0xdfe20000-0xdfe3ffff irq 22 at device 16.0 on pci0 May 29 15:38:19 angussyd kernel: pci3: on pcib3 May 29 15:38:19 angussyd kernel: pcib4: mem 0xdfe40000-0xdfe5ffff irq 23 at device 17.0 on pci0 May 29 15:38:19 angussyd kernel: pci4: on pcib4 May 29 15:38:19 angussyd kernel: ahci0: port 0x1c20-0x1c27,0x1c28-0x1c2b,0x1c00-0x1c1f mem 0xdfe74000-0xdfe75fff,0xdfe7c000-0xdfe7c0ff,0xdfe7a000-0xdfe7a7ff irq 21 at device 20.0 on pci0 May 29 15:38:19 angussyd kernel: ahci0: AHCI v1.31 with 5 6Gbps ports, Port Multiplier supported May 29 15:38:19 angussyd kernel: ahcich1: at channel 1 on ahci0 May 29 15:38:19 angussyd kernel: ahcich3: at channel 3 on ahci0 May 29 15:38:19 angussyd kernel: ahcich4: at channel 4 on ahci0 May 29 15:38:19 angussyd kernel: ahcich5: at channel 5 on ahci0 May 29 15:38:19 angussyd kernel: ahcich6: at channel 6 on ahci0 May 29 15:38:19 angussyd kernel: xhci0: mem 0xdfe60000-0xdfe6ffff irq 19 at device 21.0 on pci0 May 29 15:38:19 angussyd kernel: xhci0: 32 bytes context size, 64-bit DMA May 29 15:38:19 angussyd kernel: usbus0 on xhci0 May 29 15:38:19 angussyd kernel: usbus0: 5.0Gbps Super Speed USB v3.0 May 29 15:38:19 angussyd kernel: pcib5: irq 16 at device 22.0 on pci0 May 29 15:38:19 angussyd kernel: pci5: on pcib5 May 29 15:38:19 angussyd kernel: pcib0: no PRT entry for 0.22.INTB May 29 15:38:19 angussyd kernel: ix0: mem 0xde800000-0xde9fffff,0xdec00000-0xdec03fff irq 16 at device 0.0 on pci5 May 29 15:38:19 angussyd kernel: ix0: Using MSI-X interrupts with 5 vectors May 29 15:38:19 angussyd kernel: ix0: Ethernet address: 00:08:a2:0e:da:4d May 29 15:38:19 angussyd kernel: ix0: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 15:38:19 angussyd kernel: ix1: mem 0xdea00000-0xdebfffff,0xdec04000-0xdec07fff irq 10 at device 0.1 on pci5 May 29 15:38:19 angussyd kernel: ix1: Using MSI-X interrupts with 5 vectors May 29 15:38:19 angussyd kernel: ix1: Ethernet address: 00:08:a2:0e:da:4e May 29 15:38:19 angussyd kernel: ix1: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 15:38:19 angussyd kernel: pcib6: irq 17 at device 23.0 on pci0 May 29 15:38:19 angussyd kernel: pci6: on pcib6 May 29 15:38:19 angussyd kernel: pcib0: no PRT entry for 0.23.INTB May 29 15:38:19 angussyd kernel: ix2: mem 0xdee00000-0xdeffffff,0xdf200000-0xdf203fff irq 17 at device 0.0 on pci6 May 29 15:38:19 angussyd kernel: ix2: Using MSI-X interrupts with 5 vectors May 29 15:38:19 angussyd kernel: ix2: Ethernet address: 00:08:a2:0e:da:4f May 29 15:38:19 angussyd kernel: mdio0: on ix2 May 29 15:38:19 angussyd kernel: e6000sw0: on mdio0 May 29 15:38:19 angussyd kernel: e6000sw0: single-chip addressing mode May 29 15:38:19 angussyd kernel: miibus0: on e6000sw0 May 29 15:38:19 angussyd kernel: e1000phy0: PHY 1 on miibus0 May 29 15:38:19 angussyd kernel: e1000phy0: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:38:19 angussyd kernel: miibus1: on e6000sw0 May 29 15:38:19 angussyd kernel: e1000phy1: PHY 2 on miibus1 May 29 15:38:19 angussyd kernel: e1000phy1: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:38:19 angussyd kernel: miibus2: on e6000sw0 May 29 15:38:19 angussyd kernel: e1000phy2: PHY 3 on miibus2 May 29 15:38:19 angussyd kernel: e1000phy2: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:38:19 angussyd kernel: miibus3: on e6000sw0 May 29 15:38:19 angussyd kernel: e1000phy3: PHY 4 on miibus3 May 29 15:38:19 angussyd kernel: e1000phy3: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:38:19 angussyd kernel: miibus4: on e6000sw0 May 29 15:38:19 angussyd kernel: e1000phy4: PHY 5 on miibus4 May 29 15:38:19 angussyd kernel: e1000phy4: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:38:19 angussyd kernel: miibus5: on e6000sw0 May 29 15:38:19 angussyd kernel: e1000phy5: PHY 6 on miibus5 May 29 15:38:19 angussyd kernel: e1000phy5: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:38:19 angussyd kernel: miibus6: on e6000sw0 May 29 15:38:19 angussyd kernel: e1000phy6: PHY 7 on miibus6 May 29 15:38:19 angussyd kernel: e1000phy6: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:38:19 angussyd kernel: miibus7: on e6000sw0 May 29 15:38:19 angussyd kernel: e1000phy7: PHY 8 on miibus7 May 29 15:38:19 angussyd kernel: e1000phy7: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:38:19 angussyd kernel: e6000sw0: switch is ready. May 29 15:38:19 angussyd kernel: etherswitch0: on e6000sw0 May 29 15:38:19 angussyd kernel: ix2: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 15:38:19 angussyd kernel: e6000sw0port1: link state changed to DOWN May 29 15:38:19 angussyd kernel: e6000sw0port2: link state changed to UP May 29 15:38:19 angussyd kernel: e6000sw0port3: link state changed to UP May 29 15:38:19 angussyd kernel: ix3: May 29 15:38:19 angussyd kernel: e6000sw0port4: link state changed to DOWN May 29 15:38:19 angussyd kernel: mem 0xdf000000-0xdf1fffff,0xdf204000-0xdf207fff irq 10 at device 0.1 on pci6 May 29 15:38:19 angussyd kernel: e6000sw0port5: link state changed to DOWN May 29 15:38:19 angussyd kernel: e6000sw0port6: link state changed to DOWN May 29 15:38:19 angussyd kernel: ix3: Using MSI-X interrupts with 5 vectors May 29 15:38:19 angussyd kernel: e6000sw0port7: link state changed to DOWN May 29 15:38:19 angussyd kernel: e6000sw0port8: link state changed to DOWN May 29 15:38:19 angussyd kernel: ix3: Ethernet address: 00:08:a2:0e:da:50 May 29 15:38:19 angussyd kernel: ix3: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 15:38:19 angussyd kernel: pci0: at device 24.0 (no driver attached) May 29 15:38:19 angussyd kernel: sdhci_pci0: mem 0xdfe77000-0xdfe77fff,0xdfe78000-0xdfe78fff irq 16 at device 28.0 on pci0 May 29 15:38:19 angussyd kernel: sdhci_pci0: 1 slot(s) allocated May 29 15:38:19 angussyd kernel: mmc0: on sdhci_pci0 May 29 15:38:19 angussyd kernel: isab0: at device 31.0 on pci0 May 29 15:38:19 angussyd kernel: isa0: on isab0 May 29 15:38:19 angussyd kernel: pci0: at device 31.2 (no driver attached) May 29 15:38:19 angussyd kernel: pci0: at device 31.5 (no driver attached) May 29 15:38:19 angussyd kernel: uart0: port 0x3f8-0x3ff irq 19 flags 0x10 on acpi0 May 29 15:38:19 angussyd kernel: uart0: console (115200,n,8,1) May 29 15:38:19 angussyd kernel: uart1: port 0x2f8-0x2ff irq 18 on acpi0 May 29 15:38:19 angussyd kernel: orm0: at iomem 0xc0000-0xc0fff,0xee800-0xeffff on isa0 May 29 15:38:19 angussyd kernel: ppc0: cannot reserve I/O port range May 29 15:38:19 angussyd kernel: est0: on cpu0 May 29 15:38:19 angussyd kernel: est1: on cpu1 May 29 15:38:19 angussyd kernel: est2: on cpu2 May 29 15:38:19 angussyd kernel: est3: on cpu3 May 29 15:38:19 angussyd kernel: Timecounters tick every 1.000 msec May 29 15:38:19 angussyd kernel: ugen0.1: <0x8086 XHCI root HUB> at usbus0 May 29 15:38:19 angussyd kernel: uhub0: <0x8086 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0 May 29 15:38:19 angussyd kernel: mmcsd0: 31GB at mmc0 50.0MHz/8bit/65535-block May 29 15:38:19 angussyd kernel: mmcsd0boot0: 4MB partion 1 at mmcsd0 May 29 15:38:19 angussyd kernel: mmcsd0boot1: 4MB partion 2 at mmcsd0 May 29 15:38:19 angussyd kernel: mmcsd0rpmb: 4MB partion 3 at mmcsd0 May 29 15:38:19 angussyd kernel: ada0 at ahcich1 bus 0 scbus0 target 0 lun 0 May 29 15:38:19 angussyd kernel: ada0: ACS-2 ATA SATA 3.x device May 29 15:38:19 angussyd kernel: ada0: Serial Number 1832005701182 May 29 15:38:19 angussyd kernel: ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 512bytes) May 29 15:38:19 angussyd kernel: ada0: Command Queueing enabled May 29 15:38:19 angussyd kernel: ada0: 228936MB (468862128 512 byte sectors) May 29 15:38:19 angussyd kernel: Trying to mount root from ufs:/dev/ufsid/5b0df81c099aa6c1 [rw]... May 29 15:38:19 angussyd kernel: random: unblocking device. May 29 15:38:19 angussyd kernel: uhub0: 8 ports with 8 removable, self powered May 29 15:38:19 angussyd kernel: e6000sw0port4: link state changed to UP May 29 15:38:19 angussyd kernel: e6000sw0port5: link state changed to UP May 29 15:38:19 angussyd kernel: e6000sw0port6: link state changed to UP May 29 15:38:19 angussyd kernel: e6000sw0port7: link state changed to UP May 29 15:38:19 angussyd kernel: e6000sw0port8: link state changed to UP May 29 15:38:19 angussyd kernel: CPU: Intel(R) Atom(TM) CPU C3558 @ 2.20GHz (2200.07-MHz K8-class CPU) May 29 15:38:19 angussyd kernel: Origin="GenuineIntel" Id=0x506f1 Family=0x6 Model=0x5f Stepping=1 May 29 15:38:19 angussyd kernel: Features=0xbfebfbff May 29 15:38:19 angussyd kernel: Features2=0x4ff8ebbf May 29 15:38:19 angussyd kernel: AMD Features=0x2c100800 May 29 15:38:19 angussyd kernel: AMD Features2=0x101 May 29 15:38:19 angussyd kernel: Structured Extended Features=0x2294e283 May 29 15:38:19 angussyd kernel: Structured Extended Features3=0xac000400 May 29 15:38:19 angussyd kernel: XSAVE Features=0xf May 29 15:38:19 angussyd kernel: IA32_ARCH_CAPS=0x69 May 29 15:38:19 angussyd kernel: VT-x: (disabled in BIOS) PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr May 29 15:38:19 angussyd kernel: TSC: P-state invariant, performance statistics May 29 15:38:19 angussyd kernel: padlock0: No ACE support. May 29 15:38:19 angussyd kernel: aesni0: on motherboard May 29 15:38:19 angussyd kernel: coretemp0: on cpu0 May 29 15:38:19 angussyd kernel: coretemp1: on cpu1 May 29 15:38:19 angussyd kernel: coretemp2: on cpu2 May 29 15:38:19 angussyd kernel: coretemp3: on cpu3 May 29 15:38:20 angussyd sshd[11945]: Server listening on :: port 22. May 29 15:38:20 angussyd sshd[11945]: Server listening on 0.0.0.0 port 22. May 29 15:38:20 angussyd syslogd: Logging subprocess 12064 (exec /usr/local/sbin/sshguard) exited due to signal 15. May 29 15:38:22 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:38:22 angussyd kernel: May 29 15:38:22 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 15:38:23 angussyd check_reload_status: Linkup starting e6000sw0port3 May 29 15:38:23 angussyd kernel: e6000sw0port3: link state changed to DOWN May 29 15:38:25 angussyd check_reload_status: Linkup starting e6000sw0port4 May 29 15:38:25 angussyd kernel: e6000sw0port4: link state changed to DOWN May 29 15:38:26 angussyd check_reload_status: Linkup starting e6000sw0port5 May 29 15:38:26 angussyd kernel: e6000sw0port5: link state changed to DOWN May 29 15:38:26 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:38:26 angussyd kernel: e6000sw0port2: link state changed to UP May 29 15:38:27 angussyd check_reload_status: Linkup starting e6000sw0port6 May 29 15:38:27 angussyd kernel: e6000sw0port6: link state changed to DOWN May 29 15:38:27 angussyd check_reload_status: Linkup starting e6000sw0port3 May 29 15:38:27 angussyd kernel: e6000sw0port3: link state changed to UP May 29 15:38:28 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 15:38:28 angussyd kernel: e6000sw0port7: link state changed to DOWN May 29 15:38:28 angussyd check_reload_status: Linkup starting e6000sw0port4 May 29 15:38:28 angussyd kernel: e6000sw0port4: link state changed to UP May 29 15:38:29 angussyd check_reload_status: Linkup starting e6000sw0port8 May 29 15:38:29 angussyd kernel: e6000sw0port8: link state changed to DOWN May 29 15:38:29 angussyd check_reload_status: Linkup starting e6000sw0port5 May 29 15:38:29 angussyd kernel: e6000sw0port5: link state changed to UP May 29 15:38:30 angussyd check_reload_status: Linkup starting lagg0 May 29 15:38:30 angussyd kernel: May 29 15:38:30 angussyd kernel: lagg0: IPv6 addresses on ix2 have been removed before adding it as a member to prevent IPv6 address scope violation. May 29 15:38:30 angussyd kernel: lagg0: link state changed to DOWN May 29 15:38:30 angussyd check_reload_status: Linkup starting e6000sw0port6 May 29 15:38:30 angussyd kernel: e6000sw0port6: link state changed to UP May 29 15:38:31 angussyd check_reload_status: Linkup starting ix2 May 29 15:38:31 angussyd kernel: ix2: link state changed to UP May 29 15:38:31 angussyd kernel: lagg0: link state changed to UP May 29 15:38:31 angussyd check_reload_status: Linkup starting lagg0 May 29 15:38:31 angussyd kernel: lagg0: IPv6 addresses on ix3 have been removed before adding it as a member to prevent IPv6 address scope violation. May 29 15:38:31 angussyd check_reload_status: Linkup starting ix2 May 29 15:38:31 angussyd kernel: May 29 15:38:31 angussyd kernel: ix2: link state changed to DOWN May 29 15:38:31 angussyd kernel: lagg0: link state changed to DOWN May 29 15:38:31 angussyd check_reload_status: Linkup starting lagg0 May 29 15:38:31 angussyd php-cgi: rc.bootup: Interface lan tracking non-existent interface wan May 29 15:38:31 angussyd kernel: vlan0: changing name to 'lagg0.4090' May 29 15:38:31 angussyd kernel: vlan1: changing name to 'lagg0.4091' May 29 15:38:31 angussyd check_reload_status: Linkup starting ix2 May 29 15:38:31 angussyd kernel: ix2: link state changed to UP May 29 15:38:31 angussyd kernel: lagg0: link state changed to UP May 29 15:38:31 angussyd kernel: lagg0.4090: link state changed to UP May 29 15:38:31 angussyd kernel: lagg0.4091: link state changed to UP May 29 15:38:31 angussyd check_reload_status: Linkup starting lagg0 May 29 15:38:31 angussyd check_reload_status: Linkup starting lagg0.4090 May 29 15:38:31 angussyd check_reload_status: Linkup starting lagg0.4091 May 29 15:38:31 angussyd check_reload_status: Linkup starting ix3 May 29 15:38:31 angussyd kernel: ix3: link state changed to UP May 29 15:38:31 angussyd kernel: vlan2: changing name to 'ix1.10' May 29 15:38:31 angussyd kernel: vlan3: changing name to 'ix1.12' May 29 15:38:31 angussyd kernel: vlan4: changing name to 'ix1.15' May 29 15:38:32 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 15:38:32 angussyd kernel: vlan5: changing name to 'ix1.19' May 29 15:38:32 angussyd kernel: e6000sw0port7: link state changed to UP May 29 15:38:32 angussyd check_reload_status: Linkup starting ix1 May 29 15:38:32 angussyd kernel: ix1: link state changed to UP May 29 15:38:32 angussyd kernel: ix1.19: link state changed to UP May 29 15:38:32 angussyd kernel: ix1.10: link state changed to UP May 29 15:38:32 angussyd kernel: ix1.12: link state changed to UP May 29 15:38:32 angussyd kernel: ix1.15: link state changed to UP May 29 15:38:32 angussyd check_reload_status: Linkup starting ix1.19 May 29 15:38:32 angussyd check_reload_status: Linkup starting ix1.10 May 29 15:38:32 angussyd php-cgi: rc.bootup: Interface lan tracking non-existent interface wan May 29 15:38:32 angussyd check_reload_status: Linkup starting ix1.12 May 29 15:38:32 angussyd check_reload_status: Linkup starting ix1.15 May 29 15:38:32 angussyd php-cgi: rc.bootup: Resyncing OpenVPN instances. May 29 15:38:32 angussyd kernel: pflog0: promiscuous mode enabled May 29 15:38:32 angussyd check_reload_status: Linkup starting ix0 May 29 15:38:32 angussyd kernel: .... May 29 15:38:32 angussyd kernel: ix0: link state changed to UP May 29 15:38:34 angussyd check_reload_status: Linkup starting e6000sw0port8 May 29 15:38:34 angussyd kernel: May 29 15:38:34 angussyd kernel: e6000sw0port8: link state changed to UP May 29 15:38:34 angussyd php-cgi: rc.bootup: Default gateway setting as default. May 29 15:38:34 angussyd php-cgi: rc.bootup: Gateway, none 'available' for inet6, use the first one configured. '' May 29 15:38:34 angussyd rc.gateway_alarm[59011]: >>> Gateway alarm: OPT1GW (Addr:27.111.246.205 Alarm:1 RTT:.919ms RTTsd:0.000ms Loss:50%) May 29 15:38:34 angussyd check_reload_status: updating dyndns OPT1GW May 29 15:38:34 angussyd check_reload_status: Restarting ipsec tunnels May 29 15:38:34 angussyd check_reload_status: Restarting OpenVPN tunnels/interfaces May 29 15:38:34 angussyd check_reload_status: Reloading filter May 29 15:38:34 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:38:35 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:38:36 angussyd sshd[65321]: Unable to negotiate with 218.92.0.209 port 15559: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:38:36 angussyd sshguard[81901]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:38:36 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:38:37 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:38:39 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:38:40 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:38:41 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:38:42 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:38:43 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:38:44 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:38:45 angussyd php-cgi: rc.bootup: sync unbound done. May 29 15:38:45 angussyd kernel: done. May 29 15:38:45 angussyd kernel: done. May 29 15:38:46 angussyd kernel: done. May 29 15:38:46 angussyd php-cgi: rc.bootup: NTPD is starting up. May 29 15:38:46 angussyd kernel: done. May 29 15:38:46 angussyd kernel: done. May 29 15:38:46 angussyd check_reload_status: Updating all dyndns May 29 15:38:47 angussyd kernel: .done. May 29 15:38:50 angussyd rc.gateway_alarm[16794]: >>> Gateway alarm: OPT1GW (Addr:27.111.246.205 Alarm:0 RTT:.975ms RTTsd:1.451ms Loss:8%) May 29 15:38:50 angussyd check_reload_status: updating dyndns OPT1GW May 29 15:38:50 angussyd check_reload_status: Restarting ipsec tunnels May 29 15:38:50 angussyd check_reload_status: Restarting OpenVPN tunnels/interfaces May 29 15:38:50 angussyd check_reload_status: Reloading filter May 29 15:38:51 angussyd php-cgi: rc.bootup: Creating rrd update script May 29 15:38:51 angussyd kernel: done. May 29 15:38:51 angussyd root: /etc/rc.d/hostid: WARNING: hostid: unable to figure out a UUID from DMI data, generating a new one May 29 15:38:53 angussyd syslogd: exiting on signal 15 May 29 15:38:53 angussyd syslogd: kernel boot file is /boot/kernel/kernel May 29 15:38:54 angussyd kernel: done. May 29 15:38:55 angussyd check_reload_status: Syncing firewall May 29 15:38:55 angussyd php: /etc/rc.packages: Beginning package installation for IPsec Profile Wizard . May 29 15:38:55 angussyd check_reload_status: Syncing firewall May 29 15:38:55 angussyd php: /etc/rc.packages: Successfully installed package: IPsec Profile Wizard. May 29 15:38:55 angussyd pkg-static: pfSense-pkg-ipsec-profile-wizard upgraded: 0.11 -> 0.12 May 29 15:38:55 angussyd php: /etc/rc.packages: Beginning package installation for AWS VPC Wizard . May 29 15:38:55 angussyd php: /etc/rc.packages: Successfully installed package: AWS VPC Wizard. May 29 15:38:55 angussyd pkg-static: pfSense-pkg-aws-wizard upgraded: 0.7_6 -> 0.8 May 29 15:38:56 angussyd check_reload_status: Syncing firewall May 29 15:38:56 angussyd php: /etc/rc.packages: Beginning package installation for Netgate Coreboot Upgrade . May 29 15:38:56 angussyd check_reload_status: Syncing firewall May 29 15:38:56 angussyd php: /etc/rc.packages: Successfully installed package: Netgate Coreboot Upgrade. May 29 15:38:56 angussyd pkg-static: pfSense-pkg-Netgate_Coreboot_Upgrade upgraded: 0.26 -> 0.27_1 May 29 15:38:56 angussyd kernel: done. May 29 15:38:56 angussyd php-fpm[636]: /rc.start_packages: Restarting/Starting all packages. May 29 15:38:57 angussyd login: login on ttyv0 as root May 29 15:38:57 angussyd login: login on ttyu0 as root May 29 15:39:25 angussyd sshd[66159]: Unable to negotiate with 218.92.0.209 port 15887: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:39:25 angussyd sshguard[27099]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:40:18 angussyd sshd[91972]: Unable to negotiate with 218.92.0.209 port 20517: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:40:18 angussyd sshguard[27099]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:41:10 angussyd sshd[15549]: Unable to negotiate with 218.92.0.209 port 63116: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:41:10 angussyd sshguard[27099]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:41:10 angussyd sshguard[27099]: Blocking "218.92.0.209/32" for 120 secs (3 attacks in 105 secs, after 1 abuses over 105 secs.) May 29 15:41:26 angussyd php-fpm[636]: /index.php: Successful login for user 'admin' from: 192.168.1.100 (Local Database) May 29 15:42:36 angussyd php-fpm[3750]: /netgate_coreboot_upgrade.php: Stopping all packages. May 29 15:42:38 angussyd reboot: rebooted by root May 29 15:42:38 angussyd syslogd: exiting on signal 15 May 29 15:44:22 angussyd syslogd: kernel boot file is /boot/kernel/kernel May 29 15:44:22 angussyd kernel: Copyright (c) 1992-2018 The FreeBSD Project. May 29 15:44:22 angussyd kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 May 29 15:44:22 angussyd kernel: The Regents of the University of California. All rights reserved. May 29 15:44:22 angussyd kernel: FreeBSD is a registered trademark of The FreeBSD Foundation. May 29 15:44:22 angussyd kernel: FreeBSD 11.2-RELEASE-p10 #9 10fea60fdde(factory-RELENG_2_4_4): Thu May 16 06:55:01 EDT 2019 May 29 15:44:22 angussyd kernel: root@buildbot1-nyi.netgate.com:/build/factory-crossbuild-244/obj/amd64/bwlyKhYx/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/sys/pfSense amd64 May 29 15:44:22 angussyd kernel: FreeBSD clang version 6.0.0 (tags/RELEASE_600/final 326565) (based on LLVM 6.0.0) May 29 15:44:22 angussyd kernel: VT(vga): resolution 640x480 May 29 15:44:22 angussyd kernel: CPU: Intel(R) Atom(TM) CPU C3558 @ 2.20GHz (2200.07-MHz K8-class CPU) May 29 15:44:22 angussyd kernel: Origin="GenuineIntel" Id=0x506f1 Family=0x6 Model=0x5f Stepping=1 May 29 15:44:22 angussyd kernel: Features=0xbfebfbff May 29 15:44:22 angussyd kernel: Features2=0x4ff8ebbf May 29 15:44:22 angussyd kernel: AMD Features=0x2c100800 May 29 15:44:22 angussyd kernel: AMD Features2=0x101 May 29 15:44:22 angussyd kernel: Structured Extended Features=0x2294e283 May 29 15:44:22 angussyd kernel: Structured Extended Features3=0x2c000000 May 29 15:44:22 angussyd kernel: XSAVE Features=0xf May 29 15:44:22 angussyd kernel: IA32_ARCH_CAPS=0x1 May 29 15:44:22 angussyd kernel: VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr May 29 15:44:22 angussyd kernel: TSC: P-state invariant, performance statistics May 29 15:44:22 angussyd kernel: real memory = 10737418240 (10240 MB) May 29 15:44:22 angussyd kernel: avail memory = 8204009472 (7823 MB) May 29 15:44:22 angussyd kernel: Event timer "LAPIC" quality 600 May 29 15:44:22 angussyd kernel: ACPI APIC Table: May 29 15:44:22 angussyd kernel: WARNING: L1 data cache covers less APIC IDs than a core May 29 15:44:22 angussyd kernel: 0 < 1 May 29 15:44:22 angussyd kernel: FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs May 29 15:44:22 angussyd kernel: FreeBSD/SMP: 1 package(s) x 4 core(s) May 29 15:44:22 angussyd kernel: ioapic0: Changing APIC ID to 2 May 29 15:44:22 angussyd kernel: ioapic0 irqs 0-23 on motherboard May 29 15:44:22 angussyd kernel: SMP: AP CPU #3 Launched! May 29 15:44:22 angussyd kernel: SMP: AP CPU #1 Launched! May 29 15:44:22 angussyd kernel: SMP: AP CPU #2 Launched! May 29 15:44:22 angussyd kernel: Timecounter "TSC-low" frequency 1100036013 Hz quality 1000 May 29 15:44:22 angussyd kernel: ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 15:44:22 angussyd kernel: ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 15:44:22 angussyd kernel: module_register_init: MOD_LOAD (ipw_bss_fw, 0xffffffff80685700, 0) error 1 May 29 15:44:22 angussyd kernel: random: entropy device external interface May 29 15:44:22 angussyd kernel: ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 15:44:22 angussyd kernel: ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 15:44:22 angussyd kernel: module_register_init: MOD_LOAD (ipw_ibss_fw, 0xffffffff806857b0, 0) error 1 May 29 15:44:22 angussyd kernel: ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 15:44:22 angussyd kernel: ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 15:44:22 angussyd kernel: module_register_init: MOD_LOAD (ipw_monitor_fw, 0xffffffff80685860, 0) error 1 May 29 15:44:22 angussyd kernel: iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 15:44:22 angussyd kernel: iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 15:44:22 angussyd kernel: module_register_init: MOD_LOAD (iwi_bss_fw, 0xffffffff806ac730, 0) error 1 May 29 15:44:22 angussyd kernel: iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 15:44:22 angussyd kernel: iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 15:44:22 angussyd kernel: module_register_init: MOD_LOAD (iwi_ibss_fw, 0xffffffff806ac7e0, 0) error 1 May 29 15:44:22 angussyd kernel: iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 15:44:22 angussyd kernel: iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 15:44:22 angussyd kernel: module_register_init: MOD_LOAD (iwi_monitor_fw, 0xffffffff806ac890, 0) error 1 May 29 15:44:22 angussyd kernel: wlan: mac acl policy registered May 29 15:44:22 angussyd kernel: kbd0 at kbdmux0 May 29 15:44:22 angussyd kernel: netmap: loaded module May 29 15:44:22 angussyd kernel: module_register_init: MOD_LOAD (vesa, 0xffffffff8120faa0, 0) error 19 May 29 15:44:22 angussyd kernel: random: registering fast source Intel Secure Key RNG May 29 15:44:22 angussyd kernel: random: fast provider: "Intel Secure Key RNG" May 29 15:44:22 angussyd kernel: nexus0 May 29 15:44:22 angussyd kernel: vtvga0: on motherboard May 29 15:44:22 angussyd kernel: cryptosoft0: on motherboard May 29 15:44:22 angussyd kernel: padlock0: No ACE support. May 29 15:44:22 angussyd kernel: acpi0: on motherboard May 29 15:44:22 angussyd kernel: acpi0: Power Button (fixed) May 29 15:44:22 angussyd kernel: hpet0: iomem 0xfed00000-0xfed003ff on acpi0 May 29 15:44:22 angussyd kernel: Timecounter "HPET" frequency 24000000 Hz quality 950 May 29 15:44:22 angussyd kernel: Event timer "HPET" frequency 24000000 Hz quality 550 May 29 15:44:22 angussyd kernel: Event timer "HPET1" frequency 24000000 Hz quality 440 May 29 15:44:22 angussyd kernel: Event timer "HPET2" frequency 24000000 Hz quality 440 May 29 15:44:22 angussyd kernel: Event timer "HPET3" frequency 24000000 Hz quality 440 May 29 15:44:22 angussyd kernel: Event timer "HPET4" frequency 24000000 Hz quality 440 May 29 15:44:22 angussyd kernel: cpu0: on acpi0 May 29 15:44:22 angussyd kernel: cpu1: on acpi0 May 29 15:44:22 angussyd kernel: cpu2: on acpi0 May 29 15:44:22 angussyd kernel: cpu3: on acpi0 May 29 15:44:22 angussyd kernel: atrtc0: port 0x70-0x77 on acpi0 May 29 15:44:22 angussyd kernel: atrtc0: Warning: Couldn't map I/O. May 29 15:44:22 angussyd kernel: atrtc0: registered as a time-of-day clock, resolution 1.000000s May 29 15:44:22 angussyd kernel: Event timer "RTC" frequency 32768 Hz quality 0 May 29 15:44:22 angussyd kernel: attimer0: port 0x40-0x43,0x50-0x53 irq 0 on acpi0 May 29 15:44:22 angussyd kernel: Timecounter "i8254" frequency 1193182 Hz quality 0 May 29 15:44:22 angussyd kernel: Event timer "i8254" frequency 1193182 Hz quality 100 May 29 15:44:22 angussyd kernel: Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 May 29 15:44:22 angussyd kernel: acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1808-0x180b on acpi0 May 29 15:44:22 angussyd kernel: acpi_button0: on acpi0 May 29 15:44:22 angussyd kernel: pcib0: port 0xcf8-0xcff on acpi0 May 29 15:44:22 angussyd kernel: pci0: on pcib0 May 29 15:44:22 angussyd kernel: pcib1: irq 18 at device 6.0 on pci0 May 29 15:44:22 angussyd kernel: pci1: on pcib1 May 29 15:44:22 angussyd kernel: pci1: at device 0.0 (no driver attached) May 29 15:44:22 angussyd kernel: pcib2: mem 0xdfe00000-0xdfe1ffff irq 20 at device 14.0 on pci0 May 29 15:44:22 angussyd kernel: pci2: on pcib2 May 29 15:44:22 angussyd kernel: pcib3: mem 0xdfe20000-0xdfe3ffff irq 22 at device 16.0 on pci0 May 29 15:44:22 angussyd kernel: pci3: on pcib3 May 29 15:44:22 angussyd kernel: pcib4: mem 0xdfe40000-0xdfe5ffff irq 23 at device 17.0 on pci0 May 29 15:44:22 angussyd kernel: pci4: on pcib4 May 29 15:44:22 angussyd kernel: ahci0: port 0x1c20-0x1c27,0x1c28-0x1c2b,0x1c00-0x1c1f mem 0xdfe74000-0xdfe75fff,0xdfe7c000-0xdfe7c0ff,0xdfe7a000-0xdfe7a7ff irq 21 at device 20.0 on pci0 May 29 15:44:22 angussyd kernel: ahci0: AHCI v1.31 with 5 6Gbps ports, Port Multiplier supported May 29 15:44:22 angussyd kernel: ahcich1: at channel 1 on ahci0 May 29 15:44:22 angussyd kernel: ahcich3: at channel 3 on ahci0 May 29 15:44:22 angussyd kernel: ahcich4: at channel 4 on ahci0 May 29 15:44:22 angussyd kernel: ahcich5: at channel 5 on ahci0 May 29 15:44:22 angussyd kernel: ahcich6: at channel 6 on ahci0 May 29 15:44:22 angussyd kernel: xhci0: mem 0xdfe60000-0xdfe6ffff irq 19 at device 21.0 on pci0 May 29 15:44:22 angussyd kernel: xhci0: 32 bytes context size, 64-bit DMA May 29 15:44:22 angussyd kernel: usbus0 on xhci0 May 29 15:44:22 angussyd kernel: usbus0: 5.0Gbps Super Speed USB v3.0 May 29 15:44:22 angussyd kernel: pcib5: irq 16 at device 22.0 on pci0 May 29 15:44:22 angussyd kernel: pci5: on pcib5 May 29 15:44:22 angussyd kernel: pcib0: no PRT entry for 0.22.INTB May 29 15:44:22 angussyd kernel: ix0: mem 0xde800000-0xde9fffff,0xdec00000-0xdec03fff irq 16 at device 0.0 on pci5 May 29 15:44:22 angussyd kernel: ix0: Using MSI-X interrupts with 5 vectors May 29 15:44:22 angussyd kernel: ix0: Ethernet address: 00:08:a2:0e:da:4d May 29 15:44:22 angussyd kernel: ix0: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 15:44:22 angussyd kernel: ix1: mem 0xdea00000-0xdebfffff,0xdec04000-0xdec07fff irq 10 at device 0.1 on pci5 May 29 15:44:22 angussyd kernel: ix1: Using MSI-X interrupts with 5 vectors May 29 15:44:22 angussyd kernel: ix1: Ethernet address: 00:08:a2:0e:da:4e May 29 15:44:22 angussyd kernel: ix1: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 15:44:22 angussyd kernel: pcib6: irq 17 at device 23.0 on pci0 May 29 15:44:22 angussyd kernel: pci6: on pcib6 May 29 15:44:22 angussyd kernel: pcib0: no PRT entry for 0.23.INTB May 29 15:44:22 angussyd kernel: ix2: mem 0xdee00000-0xdeffffff,0xdf200000-0xdf203fff irq 17 at device 0.0 on pci6 May 29 15:44:22 angussyd kernel: ix2: Using MSI-X interrupts with 5 vectors May 29 15:44:22 angussyd kernel: ix2: Ethernet address: 00:08:a2:0e:da:4f May 29 15:44:22 angussyd kernel: mdio0: on ix2 May 29 15:44:22 angussyd kernel: e6000sw0: on mdio0 May 29 15:44:22 angussyd kernel: e6000sw0: single-chip addressing mode May 29 15:44:22 angussyd kernel: miibus0: on e6000sw0 May 29 15:44:22 angussyd kernel: e1000phy0: PHY 1 on miibus0 May 29 15:44:22 angussyd kernel: e1000phy0: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:44:22 angussyd kernel: miibus1: on e6000sw0 May 29 15:44:22 angussyd kernel: e1000phy1: PHY 2 on miibus1 May 29 15:44:22 angussyd kernel: e1000phy1: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:44:22 angussyd kernel: miibus2: on e6000sw0 May 29 15:44:22 angussyd kernel: e1000phy2: PHY 3 on miibus2 May 29 15:44:22 angussyd kernel: e1000phy2: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:44:22 angussyd kernel: miibus3: on e6000sw0 May 29 15:44:22 angussyd kernel: e1000phy3: PHY 4 on miibus3 May 29 15:44:22 angussyd kernel: e1000phy3: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:44:22 angussyd kernel: miibus4: on e6000sw0 May 29 15:44:22 angussyd kernel: e1000phy4: PHY 5 on miibus4 May 29 15:44:22 angussyd kernel: e1000phy4: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:44:22 angussyd kernel: miibus5: on e6000sw0 May 29 15:44:22 angussyd kernel: e1000phy5: PHY 6 on miibus5 May 29 15:44:22 angussyd kernel: e1000phy5: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:44:22 angussyd kernel: miibus6: on e6000sw0 May 29 15:44:22 angussyd kernel: e1000phy6: PHY 7 on miibus6 May 29 15:44:22 angussyd kernel: e1000phy6: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:44:22 angussyd kernel: miibus7: on e6000sw0 May 29 15:44:22 angussyd kernel: e1000phy7: PHY 8 on miibus7 May 29 15:44:22 angussyd kernel: e1000phy7: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 15:44:22 angussyd kernel: e6000sw0: switch is ready. May 29 15:44:22 angussyd kernel: etherswitch0: on e6000sw0 May 29 15:44:22 angussyd kernel: ix2: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 15:44:22 angussyd kernel: e6000sw0port1: link state changed to DOWN May 29 15:44:22 angussyd kernel: e6000sw0port2: link state changed to UP May 29 15:44:22 angussyd kernel: e6000sw0port3: link state changed to DOWN May 29 15:44:22 angussyd kernel: e6000sw0port4: link state changed to DOWN May 29 15:44:22 angussyd kernel: ix3: May 29 15:44:22 angussyd kernel: e6000sw0port5: link state changed to DOWN May 29 15:44:22 angussyd kernel: mem 0xdf000000-0xdf1fffff,0xdf204000-0xdf207fff irq 10 at device 0.1 on pci6 May 29 15:44:22 angussyd kernel: ix3: May 29 15:44:22 angussyd kernel: e6000sw0port6: link state changed to DOWN May 29 15:44:22 angussyd kernel: e6000sw0port7: link state changed to UP May 29 15:44:22 angussyd kernel: Using MSI-X interrupts with 5 vectors May 29 15:44:22 angussyd kernel: e6000sw0port8: link state changed to DOWN May 29 15:44:22 angussyd kernel: ix3: Ethernet address: 00:08:a2:0e:da:50 May 29 15:44:22 angussyd kernel: ix3: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 15:44:22 angussyd kernel: pci0: at device 24.0 (no driver attached) May 29 15:44:22 angussyd kernel: sdhci_pci0: mem 0xdfe77000-0xdfe77fff,0xdfe78000-0xdfe78fff irq 16 at device 28.0 on pci0 May 29 15:44:22 angussyd kernel: sdhci_pci0: 1 slot(s) allocated May 29 15:44:22 angussyd kernel: mmc0: on sdhci_pci0 May 29 15:44:22 angussyd kernel: isab0: at device 31.0 on pci0 May 29 15:44:22 angussyd kernel: isa0: on isab0 May 29 15:44:22 angussyd kernel: pci0: at device 31.2 (no driver attached) May 29 15:44:22 angussyd kernel: pci0: at device 31.5 (no driver attached) May 29 15:44:22 angussyd kernel: uart0: port 0x3f8-0x3ff irq 19 flags 0x10 on acpi0 May 29 15:44:22 angussyd kernel: uart0: console (115200,n,8,1) May 29 15:44:22 angussyd kernel: uart1: port 0x2f8-0x2ff irq 18 on acpi0 May 29 15:44:22 angussyd kernel: orm0: at iomem 0xc0000-0xc0fff,0xee800-0xeffff on isa0 May 29 15:44:22 angussyd kernel: ppc0: cannot reserve I/O port range May 29 15:44:22 angussyd kernel: est0: on cpu0 May 29 15:44:22 angussyd kernel: est1: on cpu1 May 29 15:44:22 angussyd kernel: est2: on cpu2 May 29 15:44:22 angussyd kernel: est3: on cpu3 May 29 15:44:22 angussyd kernel: Timecounters tick every 1.000 msec May 29 15:44:22 angussyd kernel: ugen0.1: <0x8086 XHCI root HUB> at usbus0 May 29 15:44:22 angussyd kernel: uhub0: <0x8086 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0 May 29 15:44:22 angussyd kernel: mmcsd0: 31GB at mmc0 50.0MHz/8bit/65535-block May 29 15:44:22 angussyd kernel: mmcsd0boot0: 4MB partion 1 at mmcsd0 May 29 15:44:22 angussyd kernel: mmcsd0boot1: 4MB partion 2 at mmcsd0 May 29 15:44:22 angussyd kernel: mmcsd0rpmb: 4MB partion 3 at mmcsd0 May 29 15:44:22 angussyd kernel: ada0 at ahcich1 bus 0 scbus0 target 0 lun 0 May 29 15:44:22 angussyd kernel: ada0: ACS-2 ATA SATA 3.x device May 29 15:44:22 angussyd kernel: ada0: Serial Number 1832005701182 May 29 15:44:22 angussyd kernel: ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 512bytes) May 29 15:44:22 angussyd kernel: ada0: Command Queueing enabled May 29 15:44:22 angussyd kernel: ada0: 228936MB (468862128 512 byte sectors) May 29 15:44:22 angussyd kernel: Trying to mount root from ufs:/dev/ufsid/5b0df81c099aa6c1 [rw]... May 29 15:44:22 angussyd kernel: random: unblocking device. May 29 15:44:22 angussyd kernel: uhub0: 8 ports with 8 removable, self powered May 29 15:44:22 angussyd kernel: e6000sw0port3: link state changed to UP May 29 15:44:22 angussyd kernel: e6000sw0port4: link state changed to UP May 29 15:44:22 angussyd kernel: e6000sw0port5: link state changed to UP May 29 15:44:22 angussyd kernel: e6000sw0port6: link state changed to UP May 29 15:44:22 angussyd kernel: e6000sw0port8: link state changed to UP May 29 15:44:22 angussyd kernel: CPU: Intel(R) Atom(TM) CPU C3558 @ 2.20GHz (2200.07-MHz K8-class CPU) May 29 15:44:22 angussyd kernel: Origin="GenuineIntel" Id=0x506f1 Family=0x6 Model=0x5f Stepping=1 May 29 15:44:22 angussyd kernel: Features=0xbfebfbff May 29 15:44:22 angussyd kernel: Features2=0x4ff8ebbf May 29 15:44:22 angussyd kernel: AMD Features=0x2c100800 May 29 15:44:22 angussyd kernel: AMD Features2=0x101 May 29 15:44:22 angussyd kernel: Structured Extended Features=0x2294e283 May 29 15:44:22 angussyd kernel: Structured Extended Features3=0xac000400 May 29 15:44:22 angussyd kernel: XSAVE Features=0xf May 29 15:44:22 angussyd kernel: IA32_ARCH_CAPS=0x69 May 29 15:44:22 angussyd kernel: VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr May 29 15:44:22 angussyd kernel: TSC: P-state invariant, performance statistics May 29 15:44:22 angussyd kernel: padlock0: No ACE support. May 29 15:44:22 angussyd kernel: aesni0: on motherboard May 29 15:44:22 angussyd kernel: coretemp0: on cpu0 May 29 15:44:22 angussyd kernel: coretemp1: on cpu1 May 29 15:44:22 angussyd kernel: coretemp2: on cpu2 May 29 15:44:22 angussyd kernel: coretemp3: on cpu3 May 29 15:44:24 angussyd sshd[12252]: Server listening on :: port 22. May 29 15:44:24 angussyd sshd[12252]: Server listening on 0.0.0.0 port 22. May 29 15:44:24 angussyd syslogd: Logging subprocess 12511 (exec /usr/local/sbin/sshguard) exited due to signal 15. May 29 15:44:26 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:44:26 angussyd kernel: May 29 15:44:26 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 15:44:27 angussyd check_reload_status: Linkup starting e6000sw0port3 May 29 15:44:27 angussyd kernel: e6000sw0port3: link state changed to DOWN May 29 15:44:28 angussyd check_reload_status: Linkup starting e6000sw0port4 May 29 15:44:28 angussyd kernel: e6000sw0port4: link state changed to DOWN May 29 15:44:30 angussyd kernel: e6000sw0port5: link state changed to DOWN May 29 15:44:30 angussyd check_reload_status: Linkup starting e6000sw0port5 May 29 15:44:31 angussyd check_reload_status: Linkup starting e6000sw0port6 May 29 15:44:31 angussyd kernel: e6000sw0port6: link state changed to DOWN May 29 15:44:31 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:44:31 angussyd kernel: e6000sw0port2: link state changed to UP May 29 15:44:32 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 15:44:32 angussyd kernel: e6000sw0port7: link state changed to DOWN May 29 15:44:32 angussyd check_reload_status: Linkup starting e6000sw0port3 May 29 15:44:32 angussyd kernel: e6000sw0port3: link state changed to UP May 29 15:44:32 angussyd check_reload_status: Linkup starting e6000sw0port4 May 29 15:44:32 angussyd kernel: e6000sw0port4: link state changed to UP May 29 15:44:33 angussyd check_reload_status: Linkup starting e6000sw0port8 May 29 15:44:33 angussyd kernel: e6000sw0port8: link state changed to DOWN May 29 15:44:33 angussyd check_reload_status: Linkup starting e6000sw0port5 May 29 15:44:33 angussyd kernel: e6000sw0port5: link state changed to UP May 29 15:44:34 angussyd kernel: May 29 15:44:34 angussyd kernel: lagg0: IPv6 addresses on ix2 have been removed before adding it as a member to prevent IPv6 address scope violation. May 29 15:44:34 angussyd kernel: lagg0: link state changed to DOWN May 29 15:44:34 angussyd check_reload_status: Linkup starting lagg0 May 29 15:44:34 angussyd check_reload_status: Linkup starting ix2 May 29 15:44:34 angussyd kernel: ix2: link state changed to UP May 29 15:44:34 angussyd kernel: lagg0: link state changed to UP May 29 15:44:34 angussyd check_reload_status: Linkup starting lagg0 May 29 15:44:35 angussyd kernel: lagg0: IPv6 addresses on ix3 have been removed before adding it as a member to prevent IPv6 address scope violation. May 29 15:44:35 angussyd check_reload_status: Linkup starting ix2 May 29 15:44:35 angussyd kernel: May 29 15:44:35 angussyd kernel: ix2: link state changed to DOWN May 29 15:44:35 angussyd kernel: lagg0: link state changed to DOWN May 29 15:44:35 angussyd check_reload_status: Linkup starting lagg0 May 29 15:44:35 angussyd php-cgi: rc.bootup: Interface lan tracking non-existent interface wan May 29 15:44:35 angussyd kernel: vlan0: changing name to 'lagg0.4090' May 29 15:44:35 angussyd kernel: vlan1: changing name to 'lagg0.4091' May 29 15:44:35 angussyd check_reload_status: Linkup starting ix2 May 29 15:44:35 angussyd kernel: ix2: link state changed to UP May 29 15:44:35 angussyd kernel: lagg0: link state changed to UP May 29 15:44:35 angussyd kernel: lagg0.4090: link state changed to UP May 29 15:44:35 angussyd kernel: lagg0.4091: link state changed to UP May 29 15:44:35 angussyd check_reload_status: Linkup starting lagg0 May 29 15:44:35 angussyd check_reload_status: Linkup starting lagg0.4090 May 29 15:44:35 angussyd check_reload_status: Linkup starting lagg0.4091 May 29 15:44:35 angussyd check_reload_status: Linkup starting ix3 May 29 15:44:35 angussyd kernel: ix3: link state changed to UP May 29 15:44:35 angussyd kernel: vlan2: changing name to 'ix1.10' May 29 15:44:35 angussyd kernel: vlan3: changing name to 'ix1.12' May 29 15:44:35 angussyd check_reload_status: Linkup starting e6000sw0port6 May 29 15:44:35 angussyd kernel: vlan4: changing name to 'ix1.15' May 29 15:44:35 angussyd kernel: vlan5: changing name to 'ix1.19' May 29 15:44:35 angussyd kernel: e6000sw0port6: link state changed to UP May 29 15:44:35 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 15:44:35 angussyd kernel: e6000sw0port7: link state changed to UP May 29 15:44:36 angussyd check_reload_status: Linkup starting ix1 May 29 15:44:36 angussyd kernel: ix1: link state changed to UP May 29 15:44:36 angussyd kernel: ix1.19: link state changed to UP May 29 15:44:36 angussyd kernel: ix1.10: link state changed to UP May 29 15:44:36 angussyd kernel: ix1.12: link state changed to UP May 29 15:44:36 angussyd kernel: ix1.15: link state changed to UP May 29 15:44:36 angussyd php-cgi: rc.bootup: Interface lan tracking non-existent interface wan May 29 15:44:36 angussyd check_reload_status: Linkup starting ix1.19 May 29 15:44:36 angussyd check_reload_status: Linkup starting ix1.10 May 29 15:44:36 angussyd check_reload_status: Linkup starting ix1.12 May 29 15:44:36 angussyd check_reload_status: Linkup starting ix1.15 May 29 15:44:36 angussyd php-cgi: rc.bootup: Resyncing OpenVPN instances. May 29 15:44:36 angussyd kernel: done. May 29 15:44:36 angussyd kernel: pflog0: promiscuous mode enabled May 29 15:44:36 angussyd check_reload_status: Linkup starting ix0 May 29 15:44:36 angussyd kernel: ix0: link state changed to UP May 29 15:44:37 angussyd check_reload_status: Linkup starting e6000sw0port8 May 29 15:44:37 angussyd kernel: May 29 15:44:37 angussyd kernel: e6000sw0port8: link state changed to UP May 29 15:44:38 angussyd php-cgi: rc.bootup: Default gateway setting as default. May 29 15:44:38 angussyd php-cgi: rc.bootup: Gateway, none 'available' for inet6, use the first one configured. '' May 29 15:44:38 angussyd rc.gateway_alarm[57091]: >>> Gateway alarm: OPT1GW (Addr:27.111.246.205 Alarm:1 RTT:0.000ms RTTsd:0.000ms Loss:100%) May 29 15:44:38 angussyd check_reload_status: updating dyndns OPT1GW May 29 15:44:38 angussyd check_reload_status: Restarting ipsec tunnels May 29 15:44:38 angussyd check_reload_status: Restarting OpenVPN tunnels/interfaces May 29 15:44:38 angussyd check_reload_status: Reloading filter May 29 15:44:38 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:44:39 angussyd sshd[64770]: Unable to negotiate with 218.92.0.209 port 52344: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:44:39 angussyd sshguard[65532]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:44:39 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:44:40 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:44:41 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:44:42 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:44:43 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:44:44 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:44:45 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:44:47 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:44:48 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 15:44:49 angussyd php-cgi: rc.bootup: sync unbound done. May 29 15:44:49 angussyd kernel: done. May 29 15:44:49 angussyd kernel: done. May 29 15:44:50 angussyd kernel: done. May 29 15:44:50 angussyd php-cgi: rc.bootup: NTPD is starting up. May 29 15:44:50 angussyd kernel: done. May 29 15:44:51 angussyd kernel: done. May 29 15:44:51 angussyd check_reload_status: Updating all dyndns May 29 15:44:51 angussyd kernel: .done. May 29 15:44:56 angussyd php-cgi: rc.bootup: Creating rrd update script May 29 15:44:56 angussyd kernel: done. May 29 15:44:56 angussyd rc.gateway_alarm[43916]: >>> Gateway alarm: OPT1GW (Addr:27.111.246.205 Alarm:0 RTT:5.719ms RTTsd:27.093ms Loss:10%) May 29 15:44:56 angussyd check_reload_status: updating dyndns OPT1GW May 29 15:44:56 angussyd check_reload_status: Restarting ipsec tunnels May 29 15:44:56 angussyd check_reload_status: Restarting OpenVPN tunnels/interfaces May 29 15:44:56 angussyd check_reload_status: Reloading filter May 29 15:44:56 angussyd root: /etc/rc.d/hostid: WARNING: hostid: unable to figure out a UUID from DMI data, generating a new one May 29 15:44:58 angussyd syslogd: exiting on signal 15 May 29 15:44:58 angussyd syslogd: kernel boot file is /boot/kernel/kernel May 29 15:44:58 angussyd kernel: done. May 29 15:44:58 angussyd php-fpm[349]: /rc.start_packages: Restarting/Starting all packages. May 29 15:45:00 angussyd login: login on ttyv0 as root May 29 15:45:00 angussyd login: login on ttyu0 as root May 29 15:45:26 angussyd sshd[58464]: Unable to negotiate with 218.92.0.209 port 43476: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:45:26 angussyd sshguard[20880]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:46:17 angussyd sshd[83106]: Unable to negotiate with 218.92.0.209 port 32624: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:46:17 angussyd sshguard[20880]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:46:35 angussyd sshd[83476]: Invalid user ethos from 206.189.94.158 port 52906 May 29 15:46:35 angussyd sshguard[20880]: Attack from "206.189.94.158" on service 100 with danger 10. May 29 15:46:35 angussyd sshd[83476]: user NOUSER login class [preauth] May 29 15:46:35 angussyd sshd[83476]: Received disconnect from 206.189.94.158 port 52906:11: Normal Shutdown, Thank you for playing [preauth] May 29 15:46:35 angussyd sshd[83476]: Disconnected from invalid user ethos 206.189.94.158 port 52906 [preauth] May 29 15:46:35 angussyd sshguard[20880]: Attack from "206.189.94.158" on service 100 with danger 10. May 29 15:46:44 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:46:44 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 15:46:45 angussyd check_reload_status: Reloading filter May 29 15:46:51 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:46:51 angussyd kernel: e6000sw0port2: link state changed to UP May 29 15:46:52 angussyd check_reload_status: Reloading filter May 29 15:47:09 angussyd sshd[26971]: Unable to negotiate with 218.92.0.209 port 29592: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:47:09 angussyd sshguard[20880]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:47:09 angussyd sshguard[20880]: Blocking "218.92.0.209/32" for 120 secs (3 attacks in 103 secs, after 1 abuses over 103 secs.) May 29 15:49:07 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:49:07 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 15:49:08 angussyd check_reload_status: Reloading filter May 29 15:49:15 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:49:15 angussyd kernel: e6000sw0port2: link state changed to UP May 29 15:49:16 angussyd check_reload_status: Reloading filter May 29 15:49:43 angussyd sshd[93332]: Unable to negotiate with 218.92.0.209 port 60877: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:49:43 angussyd sshguard[20880]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:50:35 angussyd sshd[17755]: Unable to negotiate with 218.92.0.209 port 58729: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:50:35 angussyd sshguard[20880]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:51:27 angussyd sshd[42557]: Unable to negotiate with 218.92.0.209 port 56755: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:51:27 angussyd sshguard[20880]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:51:27 angussyd sshguard[20880]: Blocking "218.92.0.209/32" for 240 secs (3 attacks in 104 secs, after 2 abuses over 361 secs.) May 29 15:53:56 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:53:56 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 15:53:57 angussyd check_reload_status: Reloading filter May 29 15:54:01 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:54:01 angussyd kernel: e6000sw0port2: link state changed to UP May 29 15:54:02 angussyd check_reload_status: Reloading filter May 29 15:56:27 angussyd login: login on ttyu0 as root May 29 15:56:32 angussyd sshd[93970]: Unable to negotiate with 218.92.0.209 port 29571: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:56:32 angussyd sshguard[20880]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:56:49 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:56:49 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 15:56:50 angussyd check_reload_status: Reloading filter May 29 15:57:11 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 15:57:11 angussyd kernel: e6000sw0port2: link state changed to UP May 29 15:57:12 angussyd check_reload_status: Reloading filter May 29 15:57:21 angussyd sshd[42217]: Unable to negotiate with 218.92.0.209 port 14241: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:57:21 angussyd sshguard[20880]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:58:14 angussyd sshd[68845]: Unable to negotiate with 218.92.0.209 port 17979: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 15:58:14 angussyd sshguard[20880]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 15:58:14 angussyd sshguard[20880]: Blocking "218.92.0.209/32" for 480 secs (3 attacks in 102 secs, after 3 abuses over 768 secs.) May 29 15:58:34 angussyd sshd[69503]: Invalid user ftp_user from 103.23.100.217 port 44002 May 29 15:58:34 angussyd sshguard[20880]: Attack from "103.23.100.217" on service 100 with danger 10. May 29 15:58:34 angussyd sshd[69503]: user NOUSER login class [preauth] May 29 15:58:34 angussyd sshd[69503]: Received disconnect from 103.23.100.217 port 44002:11: Normal Shutdown, Thank you for playing [preauth] May 29 15:58:34 angussyd sshd[69503]: Disconnected from invalid user ftp_user 103.23.100.217 port 44002 [preauth] May 29 15:58:34 angussyd sshguard[20880]: Attack from "103.23.100.217" on service 100 with danger 10. May 29 16:00:51 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 16:00:51 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 16:00:52 angussyd check_reload_status: Reloading filter May 29 16:03:02 angussyd php-cgi: rc.initial.reboot: Stopping all packages. May 29 16:03:04 angussyd reboot: rebooted by root May 29 16:03:04 angussyd syslogd: exiting on signal 15 May 29 16:03:53 angussyd syslogd: kernel boot file is /boot/kernel/kernel May 29 16:03:53 angussyd kernel: Copyright (c) 1992-2018 The FreeBSD Project. May 29 16:03:53 angussyd kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 May 29 16:03:53 angussyd kernel: The Regents of the University of California. All rights reserved. May 29 16:03:53 angussyd kernel: FreeBSD is a registered trademark of The FreeBSD Foundation. May 29 16:03:53 angussyd kernel: FreeBSD 11.2-RELEASE-p10 #9 10fea60fdde(factory-RELENG_2_4_4): Thu May 16 06:55:01 EDT 2019 May 29 16:03:53 angussyd kernel: root@buildbot1-nyi.netgate.com:/build/factory-crossbuild-244/obj/amd64/bwlyKhYx/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/sys/pfSense amd64 May 29 16:03:53 angussyd kernel: FreeBSD clang version 6.0.0 (tags/RELEASE_600/final 326565) (based on LLVM 6.0.0) May 29 16:03:53 angussyd kernel: VT(vga): resolution 640x480 May 29 16:03:53 angussyd kernel: CPU: Intel(R) Atom(TM) CPU C3558 @ 2.20GHz (2200.07-MHz K8-class CPU) May 29 16:03:53 angussyd kernel: Origin="GenuineIntel" Id=0x506f1 Family=0x6 Model=0x5f Stepping=1 May 29 16:03:53 angussyd kernel: Features=0xbfebfbff May 29 16:03:53 angussyd kernel: Features2=0x4ff8ebbf May 29 16:03:53 angussyd kernel: AMD Features=0x2c100800 May 29 16:03:53 angussyd kernel: AMD Features2=0x101 May 29 16:03:53 angussyd kernel: Structured Extended Features=0x2294e283 May 29 16:03:53 angussyd kernel: Structured Extended Features3=0x2c000000 May 29 16:03:53 angussyd kernel: XSAVE Features=0xf May 29 16:03:53 angussyd kernel: IA32_ARCH_CAPS=0x1 May 29 16:03:53 angussyd kernel: VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr May 29 16:03:53 angussyd kernel: TSC: P-state invariant, performance statistics May 29 16:03:53 angussyd kernel: real memory = 10737418240 (10240 MB) May 29 16:03:53 angussyd kernel: avail memory = 8204009472 (7823 MB) May 29 16:03:53 angussyd kernel: Event timer "LAPIC" quality 600 May 29 16:03:53 angussyd kernel: ACPI APIC Table: May 29 16:03:53 angussyd kernel: WARNING: L1 data cache covers less APIC IDs than a core May 29 16:03:53 angussyd kernel: 0 < 1 May 29 16:03:53 angussyd kernel: FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs May 29 16:03:53 angussyd kernel: FreeBSD/SMP: 1 package(s) x 4 core(s) May 29 16:03:53 angussyd kernel: ioapic0: Changing APIC ID to 2 May 29 16:03:53 angussyd kernel: ioapic0 irqs 0-23 on motherboard May 29 16:03:53 angussyd kernel: SMP: AP CPU #1 Launched! May 29 16:03:53 angussyd kernel: SMP: AP CPU #3 Launched! May 29 16:03:53 angussyd kernel: SMP: AP CPU #2 Launched! May 29 16:03:53 angussyd kernel: Timecounter "TSC-low" frequency 1100035088 Hz quality 1000 May 29 16:03:53 angussyd kernel: ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 16:03:53 angussyd kernel: ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 16:03:53 angussyd kernel: module_register_init: MOD_LOAD (ipw_bss_fw, 0xffffffff80685700, 0) error 1 May 29 16:03:53 angussyd kernel: random: entropy device external interface May 29 16:03:53 angussyd kernel: ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 16:03:53 angussyd kernel: ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 16:03:53 angussyd kernel: module_register_init: MOD_LOAD (ipw_ibss_fw, 0xffffffff806857b0, 0) error 1 May 29 16:03:53 angussyd kernel: ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 16:03:53 angussyd kernel: ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 16:03:53 angussyd kernel: module_register_init: MOD_LOAD (ipw_monitor_fw, 0xffffffff80685860, 0) error 1 May 29 16:03:53 angussyd kernel: iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 16:03:53 angussyd kernel: iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 16:03:53 angussyd kernel: module_register_init: MOD_LOAD (iwi_bss_fw, 0xffffffff806ac730, 0) error 1 May 29 16:03:53 angussyd kernel: iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 16:03:53 angussyd kernel: iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 16:03:53 angussyd kernel: module_register_init: MOD_LOAD (iwi_ibss_fw, 0xffffffff806ac7e0, 0) error 1 May 29 16:03:53 angussyd kernel: iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 16:03:53 angussyd kernel: iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 16:03:53 angussyd kernel: module_register_init: MOD_LOAD (iwi_monitor_fw, 0xffffffff806ac890, 0) error 1 May 29 16:03:53 angussyd kernel: wlan: mac acl policy registered May 29 16:03:53 angussyd kernel: kbd0 at kbdmux0 May 29 16:03:53 angussyd kernel: netmap: loaded module May 29 16:03:53 angussyd kernel: module_register_init: MOD_LOAD (vesa, 0xffffffff8120faa0, 0) error 19 May 29 16:03:53 angussyd kernel: random: registering fast source Intel Secure Key RNG May 29 16:03:53 angussyd kernel: random: fast provider: "Intel Secure Key RNG" May 29 16:03:53 angussyd kernel: nexus0 May 29 16:03:53 angussyd kernel: vtvga0: on motherboard May 29 16:03:53 angussyd kernel: cryptosoft0: on motherboard May 29 16:03:53 angussyd kernel: padlock0: No ACE support. May 29 16:03:53 angussyd kernel: acpi0: on motherboard May 29 16:03:53 angussyd kernel: acpi0: Power Button (fixed) May 29 16:03:53 angussyd kernel: hpet0: iomem 0xfed00000-0xfed003ff on acpi0 May 29 16:03:53 angussyd kernel: Timecounter "HPET" frequency 24000000 Hz quality 950 May 29 16:03:53 angussyd kernel: Event timer "HPET" frequency 24000000 Hz quality 550 May 29 16:03:53 angussyd kernel: Event timer "HPET1" frequency 24000000 Hz quality 440 May 29 16:03:53 angussyd kernel: Event timer "HPET2" frequency 24000000 Hz quality 440 May 29 16:03:53 angussyd kernel: Event timer "HPET3" frequency 24000000 Hz quality 440 May 29 16:03:53 angussyd kernel: Event timer "HPET4" frequency 24000000 Hz quality 440 May 29 16:03:53 angussyd kernel: cpu0: on acpi0 May 29 16:03:53 angussyd kernel: cpu1: on acpi0 May 29 16:03:53 angussyd kernel: cpu2: on acpi0 May 29 16:03:53 angussyd kernel: cpu3: on acpi0 May 29 16:03:53 angussyd kernel: atrtc0: port 0x70-0x77 on acpi0 May 29 16:03:53 angussyd kernel: atrtc0: Warning: Couldn't map I/O. May 29 16:03:53 angussyd kernel: atrtc0: registered as a time-of-day clock, resolution 1.000000s May 29 16:03:53 angussyd kernel: Event timer "RTC" frequency 32768 Hz quality 0 May 29 16:03:53 angussyd kernel: attimer0: port 0x40-0x43,0x50-0x53 irq 0 on acpi0 May 29 16:03:53 angussyd kernel: Timecounter "i8254" frequency 1193182 Hz quality 0 May 29 16:03:53 angussyd kernel: Event timer "i8254" frequency 1193182 Hz quality 100 May 29 16:03:53 angussyd kernel: Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 May 29 16:03:53 angussyd kernel: acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1808-0x180b on acpi0 May 29 16:03:53 angussyd kernel: acpi_button0: on acpi0 May 29 16:03:53 angussyd kernel: pcib0: port 0xcf8-0xcff on acpi0 May 29 16:03:53 angussyd kernel: pci0: on pcib0 May 29 16:03:53 angussyd kernel: pcib1: irq 18 at device 6.0 on pci0 May 29 16:03:53 angussyd kernel: pci1: on pcib1 May 29 16:03:53 angussyd kernel: pci1: at device 0.0 (no driver attached) May 29 16:03:53 angussyd kernel: pcib2: mem 0xdfe00000-0xdfe1ffff irq 20 at device 14.0 on pci0 May 29 16:03:53 angussyd kernel: pci2: on pcib2 May 29 16:03:53 angussyd kernel: pcib3: mem 0xdfe20000-0xdfe3ffff irq 22 at device 16.0 on pci0 May 29 16:03:53 angussyd kernel: pci3: on pcib3 May 29 16:03:53 angussyd kernel: pcib4: mem 0xdfe40000-0xdfe5ffff irq 23 at device 17.0 on pci0 May 29 16:03:53 angussyd kernel: pci4: on pcib4 May 29 16:03:53 angussyd kernel: ahci0: port 0x1c20-0x1c27,0x1c28-0x1c2b,0x1c00-0x1c1f mem 0xdfe74000-0xdfe75fff,0xdfe7c000-0xdfe7c0ff,0xdfe7a000-0xdfe7a7ff irq 21 at device 20.0 on pci0 May 29 16:03:53 angussyd kernel: ahci0: AHCI v1.31 with 5 6Gbps ports, Port Multiplier supported May 29 16:03:53 angussyd kernel: ahcich1: at channel 1 on ahci0 May 29 16:03:53 angussyd kernel: ahcich3: at channel 3 on ahci0 May 29 16:03:53 angussyd kernel: ahcich4: at channel 4 on ahci0 May 29 16:03:53 angussyd kernel: ahcich5: at channel 5 on ahci0 May 29 16:03:53 angussyd kernel: ahcich6: at channel 6 on ahci0 May 29 16:03:53 angussyd kernel: xhci0: mem 0xdfe60000-0xdfe6ffff irq 19 at device 21.0 on pci0 May 29 16:03:53 angussyd kernel: xhci0: 32 bytes context size, 64-bit DMA May 29 16:03:53 angussyd kernel: usbus0 on xhci0 May 29 16:03:53 angussyd kernel: usbus0: 5.0Gbps Super Speed USB v3.0 May 29 16:03:53 angussyd kernel: pcib5: irq 16 at device 22.0 on pci0 May 29 16:03:53 angussyd kernel: pci5: on pcib5 May 29 16:03:53 angussyd kernel: pcib0: no PRT entry for 0.22.INTB May 29 16:03:53 angussyd kernel: ix0: mem 0xde800000-0xde9fffff,0xdec00000-0xdec03fff irq 16 at device 0.0 on pci5 May 29 16:03:53 angussyd kernel: ix0: Using MSI-X interrupts with 5 vectors May 29 16:03:53 angussyd kernel: ix0: Ethernet address: 00:08:a2:0e:da:4d May 29 16:03:53 angussyd kernel: ix0: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 16:03:53 angussyd kernel: ix1: mem 0xdea00000-0xdebfffff,0xdec04000-0xdec07fff irq 10 at device 0.1 on pci5 May 29 16:03:53 angussyd kernel: ix1: Using MSI-X interrupts with 5 vectors May 29 16:03:53 angussyd kernel: ix1: Ethernet address: 00:08:a2:0e:da:4e May 29 16:03:53 angussyd kernel: ix1: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 16:03:53 angussyd kernel: pcib6: irq 17 at device 23.0 on pci0 May 29 16:03:53 angussyd kernel: pci6: on pcib6 May 29 16:03:53 angussyd kernel: pcib0: no PRT entry for 0.23.INTB May 29 16:03:53 angussyd kernel: ix2: mem 0xdee00000-0xdeffffff,0xdf200000-0xdf203fff irq 17 at device 0.0 on pci6 May 29 16:03:53 angussyd kernel: ix2: Using MSI-X interrupts with 5 vectors May 29 16:03:53 angussyd kernel: ix2: Ethernet address: 00:08:a2:0e:da:4f May 29 16:03:53 angussyd kernel: mdio0: on ix2 May 29 16:03:53 angussyd kernel: e6000sw0: on mdio0 May 29 16:03:53 angussyd kernel: e6000sw0: single-chip addressing mode May 29 16:03:53 angussyd kernel: miibus0: on e6000sw0 May 29 16:03:53 angussyd kernel: e1000phy0: PHY 1 on miibus0 May 29 16:03:53 angussyd kernel: e1000phy0: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:03:53 angussyd kernel: miibus1: on e6000sw0 May 29 16:03:53 angussyd kernel: e1000phy1: PHY 2 on miibus1 May 29 16:03:53 angussyd kernel: e1000phy1: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:03:53 angussyd kernel: miibus2: on e6000sw0 May 29 16:03:53 angussyd kernel: e1000phy2: PHY 3 on miibus2 May 29 16:03:53 angussyd kernel: e1000phy2: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:03:53 angussyd kernel: miibus3: on e6000sw0 May 29 16:03:53 angussyd kernel: e1000phy3: PHY 4 on miibus3 May 29 16:03:53 angussyd kernel: e1000phy3: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:03:53 angussyd kernel: miibus4: on e6000sw0 May 29 16:03:53 angussyd kernel: e1000phy4: PHY 5 on miibus4 May 29 16:03:53 angussyd kernel: e1000phy4: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:03:53 angussyd kernel: miibus5: on e6000sw0 May 29 16:03:53 angussyd kernel: e1000phy5: PHY 6 on miibus5 May 29 16:03:53 angussyd kernel: e1000phy5: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:03:53 angussyd kernel: miibus6: on e6000sw0 May 29 16:03:53 angussyd kernel: e1000phy6: PHY 7 on miibus6 May 29 16:03:53 angussyd kernel: e1000phy6: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:03:53 angussyd kernel: miibus7: on e6000sw0 May 29 16:03:53 angussyd kernel: e1000phy7: PHY 8 on miibus7 May 29 16:03:53 angussyd kernel: e1000phy7: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:03:53 angussyd kernel: e6000sw0: switch is ready. May 29 16:03:53 angussyd kernel: etherswitch0: on e6000sw0 May 29 16:03:53 angussyd kernel: ix2: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 16:03:53 angussyd kernel: e6000sw0port1: link state changed to DOWN May 29 16:03:53 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 16:03:53 angussyd kernel: e6000sw0port3: link state changed to UP May 29 16:03:53 angussyd kernel: e6000sw0port4: link state changed to DOWN May 29 16:03:53 angussyd kernel: ix3: May 29 16:03:53 angussyd kernel: e6000sw0port5: link state changed to DOWN May 29 16:03:53 angussyd kernel: mem 0xdf000000-0xdf1fffff,0xdf204000-0xdf207fff irq 10 at device 0.1 on pci6 May 29 16:03:53 angussyd kernel: ix3: May 29 16:03:53 angussyd kernel: e6000sw0port6: link state changed to DOWN May 29 16:03:53 angussyd kernel: e6000sw0port7: link state changed to DOWN May 29 16:03:53 angussyd kernel: Using MSI-X interrupts with 5 vectors May 29 16:03:53 angussyd kernel: e6000sw0port8: link state changed to DOWN May 29 16:03:53 angussyd kernel: ix3: Ethernet address: 00:08:a2:0e:da:50 May 29 16:03:53 angussyd kernel: ix3: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 16:03:53 angussyd kernel: pci0: at device 24.0 (no driver attached) May 29 16:03:53 angussyd kernel: sdhci_pci0: mem 0xdfe77000-0xdfe77fff,0xdfe78000-0xdfe78fff irq 16 at device 28.0 on pci0 May 29 16:03:53 angussyd kernel: sdhci_pci0: 1 slot(s) allocated May 29 16:03:53 angussyd kernel: mmc0: on sdhci_pci0 May 29 16:03:53 angussyd kernel: isab0: at device 31.0 on pci0 May 29 16:03:53 angussyd kernel: isa0: on isab0 May 29 16:03:53 angussyd kernel: pci0: at device 31.2 (no driver attached) May 29 16:03:53 angussyd kernel: pci0: at device 31.5 (no driver attached) May 29 16:03:53 angussyd kernel: uart0: <16550 or compatible> port 0x3f8-0x3ff irq 19 flags 0x10 on acpi0 May 29 16:03:53 angussyd kernel: uart0: console (115200,n,8,1) May 29 16:03:53 angussyd kernel: uart1: port 0x2f8-0x2ff irq 18 on acpi0 May 29 16:03:53 angussyd kernel: orm0: at iomem 0xc0000-0xc0fff,0xee800-0xeffff on isa0 May 29 16:03:53 angussyd kernel: ppc0: cannot reserve I/O port range May 29 16:03:53 angussyd kernel: est0: on cpu0 May 29 16:03:53 angussyd kernel: est1: on cpu1 May 29 16:03:53 angussyd kernel: est2: on cpu2 May 29 16:03:53 angussyd kernel: est3: on cpu3 May 29 16:03:53 angussyd kernel: Timecounters tick every 1.000 msec May 29 16:03:53 angussyd kernel: ugen0.1: <0x8086 XHCI root HUB> at usbus0 May 29 16:03:53 angussyd kernel: uhub0: <0x8086 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0 May 29 16:03:53 angussyd kernel: mmcsd0: 31GB at mmc0 50.0MHz/8bit/65535-block May 29 16:03:53 angussyd kernel: mmcsd0boot0: 4MB partion 1 at mmcsd0 May 29 16:03:53 angussyd kernel: mmcsd0boot1: 4MB partion 2 at mmcsd0 May 29 16:03:53 angussyd kernel: mmcsd0rpmb: 4MB partion 3 at mmcsd0 May 29 16:03:53 angussyd kernel: ada0 at ahcich1 bus 0 scbus0 target 0 lun 0 May 29 16:03:53 angussyd kernel: ada0: ACS-2 ATA SATA 3.x device May 29 16:03:53 angussyd kernel: ada0: Serial Number 1832005701182 May 29 16:03:53 angussyd kernel: ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 512bytes) May 29 16:03:53 angussyd kernel: ada0: Command Queueing enabled May 29 16:03:53 angussyd kernel: ada0: 228936MB (468862128 512 byte sectors) May 29 16:03:53 angussyd kernel: Trying to mount root from ufs:/dev/ufsid/5b0df81c099aa6c1 [rw]... May 29 16:03:53 angussyd kernel: random: unblocking device. May 29 16:03:53 angussyd kernel: uhub0: 8 ports with 8 removable, self powered May 29 16:03:53 angussyd kernel: e6000sw0port4: link state changed to UP May 29 16:03:53 angussyd kernel: e6000sw0port5: link state changed to UP May 29 16:03:53 angussyd kernel: e6000sw0port6: link state changed to UP May 29 16:03:53 angussyd kernel: e6000sw0port7: link state changed to UP May 29 16:03:53 angussyd kernel: e6000sw0port8: link state changed to UP May 29 16:03:53 angussyd kernel: CPU: Intel(R) Atom(TM) CPU C3558 @ 2.20GHz (2200.07-MHz K8-class CPU) May 29 16:03:53 angussyd kernel: Origin="GenuineIntel" Id=0x506f1 Family=0x6 Model=0x5f Stepping=1 May 29 16:03:53 angussyd kernel: Features=0xbfebfbff May 29 16:03:53 angussyd kernel: Features2=0x4ff8ebbf May 29 16:03:53 angussyd kernel: AMD Features=0x2c100800 May 29 16:03:53 angussyd kernel: AMD Features2=0x101 May 29 16:03:53 angussyd kernel: Structured Extended Features=0x2294e283 May 29 16:03:53 angussyd kernel: Structured Extended Features3=0xac000400 May 29 16:03:53 angussyd kernel: XSAVE Features=0xf May 29 16:03:53 angussyd kernel: IA32_ARCH_CAPS=0x69 May 29 16:03:53 angussyd kernel: VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr May 29 16:03:53 angussyd kernel: TSC: P-state invariant, performance statistics May 29 16:03:53 angussyd kernel: padlock0: No ACE support. May 29 16:03:53 angussyd kernel: aesni0: on motherboard May 29 16:03:53 angussyd kernel: coretemp0: on cpu0 May 29 16:03:53 angussyd kernel: coretemp1: on cpu1 May 29 16:03:53 angussyd kernel: coretemp2: on cpu2 May 29 16:03:53 angussyd kernel: coretemp3: on cpu3 May 29 16:03:54 angussyd sshd[12545]: Server listening on :: port 22. May 29 16:03:54 angussyd sshd[12545]: Server listening on 0.0.0.0 port 22. May 29 16:03:54 angussyd syslogd: Logging subprocess 12803 (exec /usr/local/sbin/sshguard) exited due to signal 15. May 29 16:03:58 angussyd check_reload_status: Linkup starting e6000sw0port3 May 29 16:03:58 angussyd kernel: May 29 16:03:58 angussyd kernel: e6000sw0port3: link state changed to DOWN May 29 16:03:59 angussyd check_reload_status: Linkup starting e6000sw0port4 May 29 16:03:59 angussyd kernel: e6000sw0port4: link state changed to DOWN May 29 16:04:00 angussyd check_reload_status: Linkup starting e6000sw0port5 May 29 16:04:00 angussyd kernel: e6000sw0port5: link state changed to DOWN May 29 16:04:01 angussyd check_reload_status: Linkup starting e6000sw0port6 May 29 16:04:01 angussyd kernel: e6000sw0port6: link state changed to DOWN May 29 16:04:01 angussyd check_reload_status: Linkup starting e6000sw0port3 May 29 16:04:01 angussyd kernel: e6000sw0port3: link state changed to UP May 29 16:04:03 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 16:04:03 angussyd kernel: e6000sw0port7: link state changed to DOWN May 29 16:04:04 angussyd check_reload_status: Linkup starting e6000sw0port8 May 29 16:04:04 angussyd kernel: e6000sw0port8: link state changed to DOWN May 29 16:04:04 angussyd check_reload_status: Linkup starting e6000sw0port4 May 29 16:04:04 angussyd kernel: e6000sw0port4: link state changed to UP May 29 16:04:05 angussyd check_reload_status: Linkup starting lagg0 May 29 16:04:05 angussyd kernel: May 29 16:04:05 angussyd kernel: lagg0: IPv6 addresses on ix2 have been removed before adding it as a member to prevent IPv6 address scope violation. May 29 16:04:05 angussyd kernel: lagg0: link state changed to DOWN May 29 16:04:05 angussyd check_reload_status: Linkup starting e6000sw0port5 May 29 16:04:05 angussyd kernel: e6000sw0port5: link state changed to UP May 29 16:04:05 angussyd check_reload_status: Linkup starting e6000sw0port6 May 29 16:04:05 angussyd kernel: e6000sw0port6: link state changed to UP May 29 16:04:05 angussyd check_reload_status: Linkup starting ix2 May 29 16:04:05 angussyd kernel: ix2: link state changed to UP May 29 16:04:05 angussyd kernel: lagg0: link state changed to UP May 29 16:04:05 angussyd check_reload_status: Linkup starting lagg0 May 29 16:04:05 angussyd kernel: lagg0: IPv6 addresses on ix3 have been removed before adding it as a member to prevent IPv6 address scope violation. May 29 16:04:06 angussyd check_reload_status: Linkup starting ix2 May 29 16:04:06 angussyd kernel: May 29 16:04:06 angussyd kernel: ix2: link state changed to DOWN May 29 16:04:06 angussyd kernel: lagg0: link state changed to DOWN May 29 16:04:06 angussyd check_reload_status: Linkup starting lagg0 May 29 16:04:06 angussyd kernel: vlan0: changing name to 'lagg0.4090' May 29 16:04:06 angussyd kernel: vlan1: changing name to 'lagg0.4091' May 29 16:04:06 angussyd php-cgi: rc.bootup: Interface lan tracking non-existent interface wan May 29 16:04:06 angussyd check_reload_status: Linkup starting ix2 May 29 16:04:06 angussyd kernel: ix2: link state changed to UP May 29 16:04:06 angussyd kernel: lagg0: link state changed to UP May 29 16:04:06 angussyd kernel: lagg0.4090: link state changed to UP May 29 16:04:06 angussyd kernel: lagg0.4091: link state changed to UP May 29 16:04:06 angussyd check_reload_status: Linkup starting lagg0 May 29 16:04:06 angussyd check_reload_status: Linkup starting lagg0.4090 May 29 16:04:06 angussyd check_reload_status: Linkup starting lagg0.4091 May 29 16:04:06 angussyd check_reload_status: Linkup starting ix3 May 29 16:04:06 angussyd kernel: ix3: link state changed to UP May 29 16:04:06 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 16:04:06 angussyd kernel: vlan2: changing name to 'ix1.10' May 29 16:04:06 angussyd kernel: vlan3: changing name to 'ix1.12' May 29 16:04:06 angussyd kernel: vlan4: changing name to 'ix1.15' May 29 16:04:06 angussyd kernel: vlan5: changing name to 'ix1.19' May 29 16:04:06 angussyd kernel: e6000sw0port7: link state changed to UP May 29 16:04:06 angussyd check_reload_status: Linkup starting ix1 May 29 16:04:06 angussyd kernel: done. May 29 16:04:06 angussyd kernel: ix1: link state changed to UP May 29 16:04:06 angussyd kernel: ix1.19: link state changed to UP May 29 16:04:06 angussyd kernel: ix1.10: link state changed to UP May 29 16:04:06 angussyd kernel: ix1.12: link state changed to UP May 29 16:04:06 angussyd kernel: ix1.15: link state changed to UP May 29 16:04:06 angussyd php-cgi: rc.bootup: Interface lan tracking non-existent interface wan May 29 16:04:06 angussyd check_reload_status: Linkup starting ix1.19 May 29 16:04:06 angussyd check_reload_status: Linkup starting ix1.10 May 29 16:04:06 angussyd check_reload_status: Linkup starting ix1.12 May 29 16:04:06 angussyd check_reload_status: Linkup starting ix1.15 May 29 16:04:06 angussyd php-cgi: rc.bootup: Resyncing OpenVPN instances. May 29 16:04:06 angussyd kernel: done. May 29 16:04:06 angussyd kernel: pflog0: promiscuous mode enabled May 29 16:04:06 angussyd check_reload_status: Linkup starting ix0 May 29 16:04:06 angussyd kernel: May 29 16:04:06 angussyd kernel: ix0: link state changed to UP May 29 16:04:08 angussyd check_reload_status: Linkup starting e6000sw0port8 May 29 16:04:08 angussyd kernel: May 29 16:04:08 angussyd kernel: e6000sw0port8: link state changed to UP May 29 16:04:09 angussyd php-cgi: rc.bootup: Default gateway setting as default. May 29 16:04:09 angussyd php-cgi: rc.bootup: Gateway, none 'available' for inet6, use the first one configured. '' May 29 16:04:09 angussyd rc.gateway_alarm[60423]: >>> Gateway alarm: OPT1GW (Addr:27.111.246.205 Alarm:1 RTT:.504ms RTTsd:.033ms Loss:33%) May 29 16:04:09 angussyd check_reload_status: updating dyndns OPT1GW May 29 16:04:09 angussyd check_reload_status: Restarting ipsec tunnels May 29 16:04:09 angussyd check_reload_status: Restarting OpenVPN tunnels/interfaces May 29 16:04:09 angussyd check_reload_status: Reloading filter May 29 16:04:09 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:04:10 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:04:10 angussyd sshd[63798]: Unable to negotiate with 218.92.0.209 port 44606: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:04:10 angussyd sshguard[80342]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:04:11 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:04:12 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:04:13 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:04:14 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:04:15 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:04:16 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:04:17 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:04:18 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:04:20 angussyd php-cgi: rc.bootup: sync unbound done. May 29 16:04:20 angussyd kernel: done. May 29 16:04:20 angussyd kernel: done. May 29 16:04:21 angussyd kernel: done. May 29 16:04:21 angussyd php-cgi: rc.bootup: NTPD is starting up. May 29 16:04:21 angussyd kernel: done. May 29 16:04:21 angussyd kernel: done. May 29 16:04:21 angussyd check_reload_status: Updating all dyndns May 29 16:04:22 angussyd kernel: .done. May 29 16:04:25 angussyd rc.gateway_alarm[11887]: >>> Gateway alarm: OPT1GW (Addr:27.111.246.205 Alarm:0 RTT:1.454ms RTTsd:3.035ms Loss:8%) May 29 16:04:25 angussyd check_reload_status: updating dyndns OPT1GW May 29 16:04:25 angussyd check_reload_status: Restarting ipsec tunnels May 29 16:04:25 angussyd check_reload_status: Restarting OpenVPN tunnels/interfaces May 29 16:04:25 angussyd check_reload_status: Reloading filter May 29 16:04:26 angussyd php-cgi: rc.bootup: Creating rrd update script May 29 16:04:26 angussyd kernel: done. May 29 16:04:26 angussyd root: /etc/rc.d/hostid: WARNING: hostid: unable to figure out a UUID from DMI data, generating a new one May 29 16:04:29 angussyd syslogd: exiting on signal 15 May 29 16:04:29 angussyd syslogd: kernel boot file is /boot/kernel/kernel May 29 16:04:29 angussyd kernel: done. May 29 16:04:29 angussyd php-fpm[358]: /rc.start_packages: Restarting/Starting all packages. May 29 16:04:31 angussyd login: login on ttyv0 as root May 29 16:04:31 angussyd login: login on ttyu0 as root May 29 16:04:57 angussyd sshd[52372]: Unable to negotiate with 218.92.0.209 port 57593: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:04:57 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:05:47 angussyd sshd[80899]: Unable to negotiate with 218.92.0.209 port 49669: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:05:47 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:06:38 angussyd sshd[8589]: Unable to negotiate with 218.92.0.209 port 44297: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:06:38 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:06:38 angussyd sshguard[15509]: Blocking "218.92.0.209/32" for 120 secs (3 attacks in 101 secs, after 1 abuses over 101 secs.) May 29 16:08:50 angussyd sshd[62097]: Connection closed by 35.241.219.206 port 43824 [preauth] May 29 16:08:50 angussyd sshguard[15509]: Attack from "35.241.219.206" on service 100 with danger 2. May 29 16:09:13 angussyd sshd[62441]: Unable to negotiate with 218.92.0.209 port 42341: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:09:13 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:10:03 angussyd sshd[88934]: Unable to negotiate with 218.92.0.209 port 28647: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:10:03 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:10:56 angussyd sshd[11964]: Unable to negotiate with 218.92.0.209 port 32567: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:10:56 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:10:56 angussyd sshguard[15509]: Blocking "218.92.0.209/32" for 240 secs (3 attacks in 103 secs, after 2 abuses over 359 secs.) May 29 16:15:11 angussyd sshd[15072]: Unable to negotiate with 218.92.0.209 port 46710: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:15:11 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:16:00 angussyd sshd[40830]: Unable to negotiate with 218.92.0.209 port 53208: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:16:00 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:16:51 angussyd sshd[66992]: Unable to negotiate with 218.92.0.209 port 48562: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:16:51 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:16:51 angussyd sshguard[15509]: Blocking "218.92.0.209/32" for 480 secs (3 attacks in 100 secs, after 3 abuses over 714 secs.) May 29 16:20:24 angussyd sshd[41251]: Invalid user ftpuser from 178.62.57.246 port 42886 May 29 16:20:24 angussyd sshguard[15509]: Attack from "178.62.57.246" on service 100 with danger 10. May 29 16:20:24 angussyd sshd[41251]: user NOUSER login class [preauth] May 29 16:20:24 angussyd sshd[41251]: Received disconnect from 178.62.57.246 port 42886:11: Normal Shutdown, Thank you for playing [preauth] May 29 16:20:24 angussyd sshd[41251]: Disconnected from invalid user ftpuser 178.62.57.246 port 42886 [preauth] May 29 16:20:24 angussyd sshguard[15509]: Attack from "178.62.57.246" on service 100 with danger 10. May 29 16:22:38 angussyd kernel: ugen0.2: at usbus0 May 29 16:22:38 angussyd kernel: umass0 on uhub0 May 29 16:22:38 angussyd kernel: umass0: on usbus0 May 29 16:22:38 angussyd kernel: da0 at umass-sim0 bus 0 scbus5 target 0 lun 0 May 29 16:22:38 angussyd kernel: da0: Removable Direct Access SPC-4 SCSI device May 29 16:22:38 angussyd kernel: da0: Serial Number 4C530001010204115044 May 29 16:22:38 angussyd kernel: da0: 400.000MB/s transfers May 29 16:22:38 angussyd kernel: da0: 58656MB (120127488 512 byte sectors) May 29 16:22:38 angussyd kernel: da0: quirks=0x2 May 29 16:23:02 angussyd sshd[14916]: Invalid user jason from 61.72.254.71 port 56680 May 29 16:23:02 angussyd sshguard[15509]: Attack from "61.72.254.71" on service 100 with danger 10. May 29 16:23:02 angussyd sshd[14916]: user NOUSER login class [preauth] May 29 16:23:03 angussyd sshd[14916]: Received disconnect from 61.72.254.71 port 56680:11: Normal Shutdown, Thank you for playing [preauth] May 29 16:23:03 angussyd sshd[14916]: Disconnected from invalid user jason 61.72.254.71 port 56680 [preauth] May 29 16:23:03 angussyd sshguard[15509]: Attack from "61.72.254.71" on service 100 with danger 10. May 29 16:25:16 angussyd sshd[62622]: Unable to negotiate with 218.92.0.209 port 37357: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:25:16 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:26:07 angussyd sshd[90652]: Unable to negotiate with 218.92.0.209 port 36773: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:26:07 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:26:38 angussyd kernel: ugen0.2: at usbus0 (disconnected) May 29 16:26:38 angussyd kernel: umass0: at uhub0, port 8, addr 1 (disconnected) May 29 16:26:38 angussyd kernel: da0 at umass-sim0 bus 0 scbus5 target 0 lun 0 May 29 16:26:38 angussyd kernel: da0: s/n 4C530001010204115044 detached May 29 16:26:38 angussyd kernel: (da0:umass-sim0:0:0:0): Periph destroyed May 29 16:26:38 angussyd kernel: umass0: detached May 29 16:26:56 angussyd sshd[9111]: Unable to negotiate with 218.92.0.209 port 27449: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:26:56 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:26:56 angussyd sshguard[15509]: Blocking "218.92.0.209/32" for 960 secs (3 attacks in 100 secs, after 4 abuses over 1319 secs.) May 29 16:33:15 angussyd sshd[69918]: Connection closed by 40.74.52.180 port 45208 [preauth] May 29 16:33:15 angussyd sshguard[15509]: Attack from "40.74.52.180" on service 100 with danger 2. May 29 16:44:14 angussyd sshd[19893]: Unable to negotiate with 218.92.0.209 port 48706: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:44:14 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:45:06 angussyd sshd[45413]: Unable to negotiate with 218.92.0.209 port 50396: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:45:06 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:45:57 angussyd sshd[71229]: Unable to negotiate with 218.92.0.209 port 41316: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:45:57 angussyd sshguard[15509]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 16:45:57 angussyd sshguard[15509]: Blocking "218.92.0.209/32" for 1920 secs (3 attacks in 103 secs, after 5 abuses over 2460 secs.) May 29 16:52:50 angussyd check_reload_status: Syncing firewall May 29 16:52:51 angussyd check_reload_status: Syncing firewall May 29 16:52:51 angussyd pkg-static: pfSense-pkg-Netgate_Coreboot_Upgrade-0.27_1 deinstalled May 29 16:52:51 angussyd pkg-static: flashrom-1.0 deinstalled May 29 16:52:51 angussyd pkg-static: libpci-3.5.6_1 deinstalled May 29 16:52:51 angussyd pkg-static: e2fsprogs-libuuid-1.44.4 deinstalled May 29 16:52:51 angussyd pkg-static: pciids-20180428 deinstalled May 29 16:52:51 angussyd check_reload_status: Syncing firewall May 29 16:52:52 angussyd pkg-static: pfSense-pkg-aws-wizard-0.8 deinstalled May 29 16:52:52 angussyd pkg-static: aws-sdk-php72-3.61.8 deinstalled May 29 16:52:52 angussyd pkg-static: pfSense-pkg-ipsec-profile-wizard-0.12 deinstalled May 29 16:52:54 angussyd php-cgi: rc.initial.defaults: Stopping all packages. May 29 16:52:56 angussyd reboot: rebooted by root May 29 16:52:56 angussyd syslogd: exiting on signal 15 May 29 06:53:41 pfSense syslogd: kernel boot file is /boot/kernel/kernel May 29 06:53:41 pfSense kernel: Copyright (c) 1992-2018 The FreeBSD Project. May 29 06:53:41 pfSense kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 May 29 06:53:41 pfSense kernel: The Regents of the University of California. All rights reserved. May 29 06:53:41 pfSense kernel: FreeBSD is a registered trademark of The FreeBSD Foundation. May 29 06:53:41 pfSense kernel: FreeBSD 11.2-RELEASE-p10 #9 10fea60fdde(factory-RELENG_2_4_4): Thu May 16 06:55:01 EDT 2019 May 29 06:53:41 pfSense kernel: root@buildbot1-nyi.netgate.com:/build/factory-crossbuild-244/obj/amd64/bwlyKhYx/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/sys/pfSense amd64 May 29 06:53:41 pfSense kernel: FreeBSD clang version 6.0.0 (tags/RELEASE_600/final 326565) (based on LLVM 6.0.0) May 29 06:53:41 pfSense kernel: VT(vga): resolution 640x480 May 29 06:53:41 pfSense kernel: CPU: Intel(R) Atom(TM) CPU C3558 @ 2.20GHz (2200.07-MHz K8-class CPU) May 29 06:53:41 pfSense kernel: Origin="GenuineIntel" Id=0x506f1 Family=0x6 Model=0x5f Stepping=1 May 29 06:53:41 pfSense kernel: Features=0xbfebfbff May 29 06:53:41 pfSense kernel: Features2=0x4ff8ebbf May 29 06:53:41 pfSense kernel: AMD Features=0x2c100800 May 29 06:53:41 pfSense kernel: AMD Features2=0x101 May 29 06:53:41 pfSense kernel: Structured Extended Features=0x2294e283 May 29 06:53:41 pfSense kernel: Structured Extended Features3=0x2c000000 May 29 06:53:41 pfSense kernel: XSAVE Features=0xf May 29 06:53:41 pfSense kernel: IA32_ARCH_CAPS=0x1 May 29 06:53:41 pfSense kernel: VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr May 29 06:53:41 pfSense kernel: TSC: P-state invariant, performance statistics May 29 06:53:41 pfSense kernel: real memory = 10737418240 (10240 MB) May 29 06:53:41 pfSense kernel: avail memory = 8204009472 (7823 MB) May 29 06:53:41 pfSense kernel: Event timer "LAPIC" quality 600 May 29 06:53:41 pfSense kernel: ACPI APIC Table: May 29 06:53:41 pfSense kernel: WARNING: L1 data cache covers less APIC IDs than a core May 29 06:53:41 pfSense kernel: 0 < 1 May 29 06:53:41 pfSense kernel: FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs May 29 06:53:41 pfSense kernel: FreeBSD/SMP: 1 package(s) x 4 core(s) May 29 06:53:41 pfSense kernel: ioapic0: Changing APIC ID to 2 May 29 06:53:41 pfSense kernel: ioapic0 irqs 0-23 on motherboard May 29 06:53:41 pfSense kernel: SMP: AP CPU #1 Launched! May 29 06:53:41 pfSense kernel: SMP: AP CPU #3 Launched! May 29 06:53:41 pfSense kernel: SMP: AP CPU #2 Launched! May 29 06:53:41 pfSense kernel: Timecounter "TSC-low" frequency 1100035873 Hz quality 1000 May 29 06:53:41 pfSense kernel: ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 06:53:41 pfSense kernel: ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 06:53:41 pfSense kernel: module_register_init: MOD_LOAD (ipw_bss_fw, 0xffffffff80685700, 0) error 1 May 29 06:53:41 pfSense kernel: random: entropy device external interface May 29 06:53:41 pfSense kernel: ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 06:53:41 pfSense kernel: ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 06:53:41 pfSense kernel: module_register_init: MOD_LOAD (ipw_ibss_fw, 0xffffffff806857b0, 0) error 1 May 29 06:53:41 pfSense kernel: ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 06:53:41 pfSense kernel: ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 06:53:41 pfSense kernel: module_register_init: MOD_LOAD (ipw_monitor_fw, 0xffffffff80685860, 0) error 1 May 29 06:53:41 pfSense kernel: iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 06:53:41 pfSense kernel: iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 06:53:41 pfSense kernel: module_register_init: MOD_LOAD (iwi_bss_fw, 0xffffffff806ac730, 0) error 1 May 29 06:53:41 pfSense kernel: iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 06:53:41 pfSense kernel: iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 06:53:41 pfSense kernel: module_register_init: MOD_LOAD (iwi_ibss_fw, 0xffffffff806ac7e0, 0) error 1 May 29 06:53:41 pfSense kernel: iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 06:53:41 pfSense kernel: iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 06:53:41 pfSense kernel: module_register_init: MOD_LOAD (iwi_monitor_fw, 0xffffffff806ac890, 0) error 1 May 29 06:53:41 pfSense kernel: wlan: mac acl policy registered May 29 06:53:41 pfSense kernel: kbd0 at kbdmux0 May 29 06:53:41 pfSense kernel: netmap: loaded module May 29 06:53:41 pfSense kernel: module_register_init: MOD_LOAD (vesa, 0xffffffff8120faa0, 0) error 19 May 29 06:53:41 pfSense kernel: random: registering fast source Intel Secure Key RNG May 29 06:53:41 pfSense kernel: random: fast provider: "Intel Secure Key RNG" May 29 06:53:41 pfSense kernel: nexus0 May 29 06:53:41 pfSense kernel: vtvga0: on motherboard May 29 06:53:41 pfSense kernel: cryptosoft0: on motherboard May 29 06:53:41 pfSense kernel: padlock0: No ACE support. May 29 06:53:41 pfSense kernel: acpi0: on motherboard May 29 06:53:41 pfSense kernel: acpi0: Power Button (fixed) May 29 06:53:41 pfSense kernel: hpet0: iomem 0xfed00000-0xfed003ff on acpi0 May 29 06:53:41 pfSense kernel: Timecounter "HPET" frequency 24000000 Hz quality 950 May 29 06:53:41 pfSense kernel: Event timer "HPET" frequency 24000000 Hz quality 550 May 29 06:53:41 pfSense kernel: Event timer "HPET1" frequency 24000000 Hz quality 440 May 29 06:53:41 pfSense kernel: Event timer "HPET2" frequency 24000000 Hz quality 440 May 29 06:53:41 pfSense kernel: Event timer "HPET3" frequency 24000000 Hz quality 440 May 29 06:53:41 pfSense kernel: Event timer "HPET4" frequency 24000000 Hz quality 440 May 29 06:53:41 pfSense kernel: cpu0: on acpi0 May 29 06:53:41 pfSense kernel: cpu1: on acpi0 May 29 06:53:41 pfSense kernel: cpu2: on acpi0 May 29 06:53:41 pfSense kernel: cpu3: on acpi0 May 29 06:53:41 pfSense kernel: atrtc0: port 0x70-0x77 on acpi0 May 29 06:53:41 pfSense kernel: atrtc0: Warning: Couldn't map I/O. May 29 06:53:41 pfSense kernel: atrtc0: registered as a time-of-day clock, resolution 1.000000s May 29 06:53:41 pfSense kernel: Event timer "RTC" frequency 32768 Hz quality 0 May 29 06:53:41 pfSense kernel: attimer0: port 0x40-0x43,0x50-0x53 irq 0 on acpi0 May 29 06:53:41 pfSense kernel: Timecounter "i8254" frequency 1193182 Hz quality 0 May 29 06:53:41 pfSense kernel: Event timer "i8254" frequency 1193182 Hz quality 100 May 29 06:53:41 pfSense kernel: Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 May 29 06:53:41 pfSense kernel: acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1808-0x180b on acpi0 May 29 06:53:41 pfSense kernel: acpi_button0: on acpi0 May 29 06:53:41 pfSense kernel: pcib0: port 0xcf8-0xcff on acpi0 May 29 06:53:41 pfSense kernel: pci0: on pcib0 May 29 06:53:41 pfSense kernel: pcib1: irq 18 at device 6.0 on pci0 May 29 06:53:41 pfSense kernel: pci1: on pcib1 May 29 06:53:41 pfSense kernel: pci1: at device 0.0 (no driver attached) May 29 06:53:41 pfSense kernel: pcib2: mem 0xdfe00000-0xdfe1ffff irq 20 at device 14.0 on pci0 May 29 06:53:41 pfSense kernel: pci2: on pcib2 May 29 06:53:41 pfSense kernel: pcib3: mem 0xdfe20000-0xdfe3ffff irq 22 at device 16.0 on pci0 May 29 06:53:41 pfSense kernel: pci3: on pcib3 May 29 06:53:41 pfSense kernel: pcib4: mem 0xdfe40000-0xdfe5ffff irq 23 at device 17.0 on pci0 May 29 06:53:41 pfSense kernel: pci4: on pcib4 May 29 06:53:41 pfSense kernel: ahci0: port 0x1c20-0x1c27,0x1c28-0x1c2b,0x1c00-0x1c1f mem 0xdfe74000-0xdfe75fff,0xdfe7c000-0xdfe7c0ff,0xdfe7a000-0xdfe7a7ff irq 21 at device 20.0 on pci0 May 29 06:53:41 pfSense kernel: ahci0: AHCI v1.31 with 5 6Gbps ports, Port Multiplier supported May 29 06:53:41 pfSense kernel: ahcich1: at channel 1 on ahci0 May 29 06:53:41 pfSense kernel: ahcich3: at channel 3 on ahci0 May 29 06:53:41 pfSense kernel: ahcich4: at channel 4 on ahci0 May 29 06:53:41 pfSense kernel: ahcich5: at channel 5 on ahci0 May 29 06:53:41 pfSense kernel: ahcich6: at channel 6 on ahci0 May 29 06:53:41 pfSense kernel: xhci0: mem 0xdfe60000-0xdfe6ffff irq 19 at device 21.0 on pci0 May 29 06:53:41 pfSense kernel: xhci0: 32 bytes context size, 64-bit DMA May 29 06:53:41 pfSense kernel: usbus0 on xhci0 May 29 06:53:41 pfSense kernel: usbus0: 5.0Gbps Super Speed USB v3.0 May 29 06:53:41 pfSense kernel: pcib5: irq 16 at device 22.0 on pci0 May 29 06:53:41 pfSense kernel: pci5: on pcib5 May 29 06:53:41 pfSense kernel: pcib0: no PRT entry for 0.22.INTB May 29 06:53:41 pfSense kernel: ix0: mem 0xde800000-0xde9fffff,0xdec00000-0xdec03fff irq 16 at device 0.0 on pci5 May 29 06:53:41 pfSense kernel: ix0: Using MSI-X interrupts with 5 vectors May 29 06:53:41 pfSense kernel: ix0: Ethernet address: 00:08:a2:0e:da:4d May 29 06:53:41 pfSense kernel: ix0: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 06:53:41 pfSense kernel: ix1: mem 0xdea00000-0xdebfffff,0xdec04000-0xdec07fff irq 10 at device 0.1 on pci5 May 29 06:53:41 pfSense kernel: ix1: Using MSI-X interrupts with 5 vectors May 29 06:53:41 pfSense kernel: ix1: Ethernet address: 00:08:a2:0e:da:4e May 29 06:53:41 pfSense kernel: ix1: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 06:53:41 pfSense kernel: pcib6: irq 17 at device 23.0 on pci0 May 29 06:53:41 pfSense kernel: pci6: on pcib6 May 29 06:53:41 pfSense kernel: pcib0: no PRT entry for 0.23.INTB May 29 06:53:41 pfSense kernel: ix2: mem 0xdee00000-0xdeffffff,0xdf200000-0xdf203fff irq 17 at device 0.0 on pci6 May 29 06:53:41 pfSense kernel: ix2: Using MSI-X interrupts with 5 vectors May 29 06:53:41 pfSense kernel: ix2: Ethernet address: 00:08:a2:0e:da:4f May 29 06:53:41 pfSense kernel: mdio0: on ix2 May 29 06:53:41 pfSense kernel: e6000sw0: on mdio0 May 29 06:53:41 pfSense kernel: e6000sw0: single-chip addressing mode May 29 06:53:41 pfSense kernel: miibus0: on e6000sw0 May 29 06:53:41 pfSense kernel: e1000phy0: PHY 1 on miibus0 May 29 06:53:41 pfSense kernel: e1000phy0: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 06:53:41 pfSense kernel: miibus1: on e6000sw0 May 29 06:53:41 pfSense kernel: e1000phy1: PHY 2 on miibus1 May 29 06:53:41 pfSense kernel: e1000phy1: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 06:53:41 pfSense kernel: miibus2: on e6000sw0 May 29 06:53:41 pfSense kernel: e1000phy2: PHY 3 on miibus2 May 29 06:53:41 pfSense kernel: e1000phy2: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 06:53:41 pfSense kernel: miibus3: on e6000sw0 May 29 06:53:41 pfSense kernel: e1000phy3: PHY 4 on miibus3 May 29 06:53:41 pfSense kernel: e1000phy3: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 06:53:41 pfSense kernel: miibus4: on e6000sw0 May 29 06:53:41 pfSense kernel: e1000phy4: PHY 5 on miibus4 May 29 06:53:41 pfSense kernel: e1000phy4: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 06:53:41 pfSense kernel: miibus5: on e6000sw0 May 29 06:53:41 pfSense kernel: e1000phy5: PHY 6 on miibus5 May 29 06:53:41 pfSense kernel: e1000phy5: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 06:53:41 pfSense kernel: miibus6: on e6000sw0 May 29 06:53:41 pfSense kernel: e1000phy6: PHY 7 on miibus6 May 29 06:53:41 pfSense kernel: e1000phy6: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 06:53:41 pfSense kernel: miibus7: on e6000sw0 May 29 06:53:41 pfSense kernel: e1000phy7: PHY 8 on miibus7 May 29 06:53:41 pfSense kernel: e1000phy7: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 06:53:41 pfSense kernel: e6000sw0: switch is ready. May 29 06:53:41 pfSense kernel: etherswitch0: on e6000sw0 May 29 06:53:41 pfSense kernel: ix2: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 06:53:41 pfSense kernel: e6000sw0port1: link state changed to DOWN May 29 06:53:41 pfSense kernel: e6000sw0port2: link state changed to DOWN May 29 06:53:41 pfSense kernel: e6000sw0port3: link state changed to DOWN May 29 06:53:41 pfSense kernel: e6000sw0port4: link state changed to UP May 29 06:53:41 pfSense kernel: ix3: May 29 06:53:41 pfSense kernel: e6000sw0port5: link state changed to DOWN May 29 06:53:41 pfSense kernel: mem 0xdf000000-0xdf1fffff,0xdf204000-0xdf207fff irq 10 at device 0.1 on pci6 May 29 06:53:41 pfSense kernel: e6000sw0port6: link state changed to DOWN May 29 06:53:41 pfSense kernel: e6000sw0port7: link state changed to DOWN May 29 06:53:41 pfSense kernel: ix3: Using MSI-X interrupts with 5 vectors May 29 06:53:41 pfSense kernel: e6000sw0port8: link state changed to DOWN May 29 06:53:41 pfSense kernel: ix3: Ethernet address: 00:08:a2:0e:da:50 May 29 06:53:41 pfSense kernel: ix3: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 06:53:41 pfSense kernel: pci0: at device 24.0 (no driver attached) May 29 06:53:41 pfSense kernel: sdhci_pci0: mem 0xdfe77000-0xdfe77fff,0xdfe78000-0xdfe78fff irq 16 at device 28.0 on pci0 May 29 06:53:41 pfSense kernel: sdhci_pci0: 1 slot(s) allocated May 29 06:53:41 pfSense kernel: mmc0: on sdhci_pci0 May 29 06:53:41 pfSense kernel: isab0: at device 31.0 on pci0 May 29 06:53:41 pfSense kernel: isa0: on isab0 May 29 06:53:41 pfSense kernel: pci0: at device 31.2 (no driver attached) May 29 06:53:41 pfSense kernel: pci0: at device 31.5 (no driver attached) May 29 06:53:41 pfSense kernel: uart0: port 0x3f8-0x3ff irq 19 flags 0x10 on acpi0 May 29 06:53:41 pfSense kernel: uart0: console (115200,n,8,1) May 29 06:53:41 pfSense kernel: uart1: port 0x2f8-0x2ff irq 18 on acpi0 May 29 06:53:41 pfSense kernel: orm0: at iomem 0xc0000-0xc0fff,0xee800-0xeffff on isa0 May 29 06:53:41 pfSense kernel: ppc0: cannot reserve I/O port range May 29 06:53:41 pfSense kernel: est0: on cpu0 May 29 06:53:41 pfSense kernel: est1: on cpu1 May 29 06:53:41 pfSense kernel: est2: on cpu2 May 29 06:53:41 pfSense kernel: est3: on cpu3 May 29 06:53:41 pfSense kernel: Timecounters tick every 1.000 msec May 29 06:53:41 pfSense kernel: ugen0.1: <0x8086 XHCI root HUB> at usbus0 May 29 06:53:41 pfSense kernel: uhub0: <0x8086 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0 May 29 06:53:41 pfSense kernel: mmcsd0: 31GB at mmc0 50.0MHz/8bit/65535-block May 29 06:53:41 pfSense kernel: mmcsd0boot0: 4MB partion 1 at mmcsd0 May 29 06:53:41 pfSense kernel: mmcsd0boot1: 4MB partion 2 at mmcsd0 May 29 06:53:41 pfSense kernel: mmcsd0rpmb: 4MB partion 3 at mmcsd0 May 29 06:53:41 pfSense kernel: ada0 at ahcich1 bus 0 scbus0 target 0 lun 0 May 29 06:53:41 pfSense kernel: ada0: ACS-2 ATA SATA 3.x device May 29 06:53:41 pfSense kernel: ada0: Serial Number 1832005701182 May 29 06:53:41 pfSense kernel: ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 512bytes) May 29 06:53:41 pfSense kernel: ada0: Command Queueing enabled May 29 06:53:41 pfSense kernel: ada0: 228936MB (468862128 512 byte sectors) May 29 06:53:41 pfSense kernel: Trying to mount root from ufs:/dev/ufsid/5b0df81c099aa6c1 [rw]... May 29 06:53:41 pfSense kernel: random: unblocking device. May 29 06:53:41 pfSense kernel: uhub0: 8 ports with 8 removable, self powered May 29 06:53:41 pfSense kernel: e6000sw0port3: link state changed to UP May 29 06:53:41 pfSense kernel: e6000sw0port5: link state changed to UP May 29 06:53:41 pfSense kernel: e6000sw0port6: link state changed to UP May 29 06:53:41 pfSense kernel: e6000sw0port7: link state changed to UP May 29 06:53:41 pfSense kernel: e6000sw0port8: link state changed to UP May 29 06:53:41 pfSense kernel: CPU: Intel(R) Atom(TM) CPU C3558 @ 2.20GHz (2200.07-MHz K8-class CPU) May 29 06:53:41 pfSense kernel: Origin="GenuineIntel" Id=0x506f1 Family=0x6 Model=0x5f Stepping=1 May 29 06:53:41 pfSense kernel: Features=0xbfebfbff May 29 06:53:41 pfSense kernel: Features2=0x4ff8ebbf May 29 06:53:41 pfSense kernel: AMD Features=0x2c100800 May 29 06:53:41 pfSense kernel: AMD Features2=0x101 May 29 06:53:41 pfSense kernel: Structured Extended Features=0x2294e283 May 29 06:53:41 pfSense kernel: Structured Extended Features3=0xac000400 May 29 06:53:41 pfSense kernel: XSAVE Features=0xf May 29 06:53:41 pfSense kernel: IA32_ARCH_CAPS=0x69 May 29 06:53:41 pfSense kernel: VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr May 29 06:53:41 pfSense kernel: TSC: P-state invariant, performance statistics May 29 06:53:41 pfSense kernel: padlock0: No ACE support. May 29 06:53:41 pfSense kernel: aesni0: on motherboard May 29 06:53:41 pfSense kernel: coretemp0: on cpu0 May 29 06:53:41 pfSense kernel: coretemp1: on cpu1 May 29 06:53:41 pfSense kernel: coretemp2: on cpu2 May 29 06:53:41 pfSense kernel: coretemp3: on cpu3 May 29 16:53:41 pfSense check_reload_status: Syncing firewall May 29 16:53:45 pfSense check_reload_status: Linkup starting e6000sw0port3 May 29 06:53:45 pfSense kernel: May 29 06:53:45 pfSense kernel: e6000sw0port3: link state changed to DOWN May 29 16:53:46 pfSense check_reload_status: Linkup starting e6000sw0port4 May 29 06:53:46 pfSense kernel: e6000sw0port4: link state changed to DOWN May 29 16:53:48 pfSense check_reload_status: Linkup starting e6000sw0port5 May 29 06:53:48 pfSense kernel: e6000sw0port5: link state changed to DOWN May 29 16:53:49 pfSense check_reload_status: Linkup starting e6000sw0port6 May 29 06:53:49 pfSense kernel: e6000sw0port6: link state changed to DOWN May 29 16:53:49 pfSense check_reload_status: Linkup starting e6000sw0port3 May 29 06:53:49 pfSense kernel: e6000sw0port3: link state changed to UP May 29 16:53:50 pfSense check_reload_status: Linkup starting e6000sw0port7 May 29 06:53:50 pfSense kernel: e6000sw0port7: link state changed to DOWN May 29 16:53:51 pfSense check_reload_status: Linkup starting e6000sw0port4 May 29 06:53:51 pfSense kernel: e6000sw0port4: link state changed to UP May 29 16:53:51 pfSense check_reload_status: Linkup starting e6000sw0port8 May 29 06:53:51 pfSense kernel: e6000sw0port8: link state changed to DOWN May 29 16:53:52 pfSense check_reload_status: Linkup starting e6000sw0port5 May 29 06:53:52 pfSense kernel: e6000sw0port5: link state changed to UP May 29 16:53:52 pfSense check_reload_status: Linkup starting lagg0 May 29 06:53:52 pfSense kernel: May 29 06:53:52 pfSense kernel: lagg0: IPv6 addresses on ix2 have been removed before adding it as a member to prevent IPv6 address scope violation. May 29 06:53:52 pfSense kernel: lagg0: link state changed to DOWN May 29 16:53:52 pfSense check_reload_status: Linkup starting ix2 May 29 06:53:52 pfSense kernel: ix2: link state changed to UP May 29 06:53:52 pfSense kernel: lagg0: link state changed to UP May 29 16:53:52 pfSense check_reload_status: Linkup starting lagg0 May 29 06:53:53 pfSense kernel: lagg0: IPv6 addresses on ix3 have been removed before adding it as a member to prevent IPv6 address scope violation. May 29 16:53:54 pfSense check_reload_status: Linkup starting ix2 May 29 06:53:54 pfSense kernel: May 29 06:53:54 pfSense kernel: ix2: link state changed to DOWN May 29 06:53:54 pfSense kernel: ix2: link state changed to UP May 29 06:53:54 pfSense kernel: ix3: 2 link states coalesced May 29 06:53:54 pfSense kernel: ix3: link state changed to DOWN May 29 06:53:54 pfSense kernel: e6000sw0port6: link state changed to UP May 29 06:53:54 pfSense kernel: e6000sw0port7: link state changed to UP May 29 16:53:54 pfSense check_reload_status: Linkup starting ix2 May 29 16:53:54 pfSense check_reload_status: Linkup starting ix3 May 29 16:53:54 pfSense check_reload_status: Linkup starting e6000sw0port6 May 29 16:53:54 pfSense check_reload_status: Linkup starting e6000sw0port7 May 29 06:53:54 pfSense kernel: vlan0: changing name to 'lagg0.4090' May 29 16:53:54 pfSense check_reload_status: Linkup starting ix3 May 29 06:53:54 pfSense kernel: ix3: link state changed to UP May 29 06:53:55 pfSense kernel: e6000sw0port8: link state changed to UP May 29 16:53:55 pfSense check_reload_status: Linkup starting e6000sw0port8 May 29 16:54:55 pfSense php-cgi: rc.bootup: calling interface_dhcpv6_configure. May 29 16:54:55 pfSense php-cgi: rc.bootup: Accept router advertisements on interface lagg0.4090 May 29 16:54:55 pfSense php-cgi: rc.bootup: Starting rtsold process May 29 06:54:57 pfSense rtsold[26210]: interface vlan1 removed May 29 06:54:57 pfSense kernel: vlan1: changing name to 'lagg0.4091' May 29 16:55:59 pfSense php-cgi: rc.bootup: calling interface_dhcpv6_configure. May 29 16:55:59 pfSense php-cgi: rc.bootup: Accept router advertisements on interface lagg0.4090 May 29 16:55:59 pfSense php-cgi: rc.bootup: Starting rtsold process May 29 06:56:01 pfSense kernel: done. May 29 16:56:01 pfSense php-cgi: rc.bootup: Resyncing OpenVPN instances. May 29 06:56:01 pfSense kernel: done. May 29 06:56:01 pfSense kernel: pflog0: promiscuous mode enabled May 29 16:56:02 pfSense check_reload_status: Linkup starting ix1 May 29 06:56:02 pfSense kernel: May 29 06:56:02 pfSense kernel: ix1: link state changed to UP May 29 16:56:02 pfSense php-cgi: rc.bootup: Gateway, none 'available' for inet, use the first one configured. 'WAN_DHCP' May 29 06:56:02 pfSense kernel: done. May 29 16:56:02 pfSense php-cgi: rc.bootup: Gateway, none 'available' for inet6, use the first one configured. 'WAN_DHCP6' May 29 06:56:02 pfSense kernel: done. May 29 16:56:02 pfSense php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:56:02 pfSense check_reload_status: Linkup starting ix0 May 29 06:56:02 pfSense kernel: May 29 06:56:02 pfSense kernel: ix0: link state changed to UP May 29 16:56:03 pfSense php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:56:04 pfSense php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:56:05 pfSense php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:56:06 pfSense php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:56:07 pfSense php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:56:08 pfSense php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:56:09 pfSense php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:56:10 pfSense php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:56:11 pfSense php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:56:12 pfSense php-cgi: rc.bootup: sync unbound done. May 29 16:56:12 pfSense php-cgi: rc.bootup: Creating SSL Certificate for this host May 29 06:56:12 pfSense kernel: done. May 29 16:56:13 pfSense check_reload_status: Syncing firewall May 29 06:56:14 pfSense kernel: done. May 29 16:56:14 pfSense php-cgi: rc.bootup: NTPD is starting up. May 29 06:56:14 pfSense kernel: done. May 29 06:56:14 pfSense kernel: done. May 29 06:56:14 pfSense kernel: done. May 29 16:56:14 pfSense check_reload_status: Updating all dyndns May 29 06:56:15 pfSense kernel: .done. May 29 16:56:19 pfSense php-cgi: rc.bootup: Creating rrd update script May 29 06:56:19 pfSense root: /etc/rc.d/hostid: WARNING: hostid: unable to figure out a UUID from DMI data, generating a new one May 29 06:56:19 pfSense kernel: done. May 29 06:56:21 pfSense syslogd: exiting on signal 15 May 29 06:56:21 pfSense syslogd: kernel boot file is /boot/kernel/kernel May 29 06:56:21 pfSense kernel: done. May 29 16:56:21 pfSense php-fpm[348]: /rc.start_packages: Restarting/Starting all packages. May 29 06:56:23 pfSense login: login on ttyv0 as root May 29 06:56:23 pfSense login: login on ttyu0 as root May 29 16:57:20 pfSense check_reload_status: Linkup starting e6000sw0port2 May 29 06:57:20 pfSense kernel: e6000sw0port2: link state changed to UP May 29 16:57:21 pfSense check_reload_status: Reloading filter May 29 16:57:33 pfSense php-fpm[474]: /index.php: Successful login for user 'admin' from: 192.168.1.100 (Local Database) May 29 16:58:02 pfSense php-fpm[474]: /diag_backup.php: Installing configuration .... May 29 16:58:02 pfSense check_reload_status: Syncing firewall May 29 16:58:03 pfSense php-fpm[474]: /diag_backup.php: Stopping all packages. May 29 06:58:05 pfSense reboot: rebooted by root May 29 06:58:05 pfSense syslogd: exiting on signal 15 May 29 16:58:49 angussyd syslogd: kernel boot file is /boot/kernel/kernel May 29 16:58:49 angussyd kernel: Copyright (c) 1992-2018 The FreeBSD Project. May 29 16:58:49 angussyd kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 May 29 16:58:49 angussyd kernel: The Regents of the University of California. All rights reserved. May 29 16:58:49 angussyd kernel: FreeBSD is a registered trademark of The FreeBSD Foundation. May 29 16:58:49 angussyd kernel: FreeBSD 11.2-RELEASE-p10 #9 10fea60fdde(factory-RELENG_2_4_4): Thu May 16 06:55:01 EDT 2019 May 29 16:58:49 angussyd kernel: root@buildbot1-nyi.netgate.com:/build/factory-crossbuild-244/obj/amd64/bwlyKhYx/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/sys/pfSense amd64 May 29 16:58:49 angussyd kernel: FreeBSD clang version 6.0.0 (tags/RELEASE_600/final 326565) (based on LLVM 6.0.0) May 29 16:58:49 angussyd kernel: VT(vga): resolution 640x480 May 29 16:58:49 angussyd kernel: CPU: Intel(R) Atom(TM) CPU C3558 @ 2.20GHz (2200.07-MHz K8-class CPU) May 29 16:58:49 angussyd kernel: Origin="GenuineIntel" Id=0x506f1 Family=0x6 Model=0x5f Stepping=1 May 29 16:58:49 angussyd kernel: Features=0xbfebfbff May 29 16:58:49 angussyd kernel: Features2=0x4ff8ebbf May 29 16:58:49 angussyd kernel: AMD Features=0x2c100800 May 29 16:58:49 angussyd kernel: AMD Features2=0x101 May 29 16:58:49 angussyd kernel: Structured Extended Features=0x2294e283 May 29 16:58:49 angussyd kernel: Structured Extended Features3=0x2c000000 May 29 16:58:49 angussyd kernel: XSAVE Features=0xf May 29 16:58:49 angussyd kernel: IA32_ARCH_CAPS=0x1 May 29 16:58:49 angussyd kernel: VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr May 29 16:58:49 angussyd kernel: TSC: P-state invariant, performance statistics May 29 16:58:49 angussyd kernel: real memory = 10737418240 (10240 MB) May 29 16:58:49 angussyd kernel: avail memory = 8204009472 (7823 MB) May 29 16:58:49 angussyd kernel: Event timer "LAPIC" quality 600 May 29 16:58:49 angussyd kernel: ACPI APIC Table: May 29 16:58:49 angussyd kernel: WARNING: L1 data cache covers less APIC IDs than a core May 29 16:58:49 angussyd kernel: 0 < 1 May 29 16:58:49 angussyd kernel: FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs May 29 16:58:49 angussyd kernel: FreeBSD/SMP: 1 package(s) x 4 core(s) May 29 16:58:49 angussyd kernel: ioapic0: Changing APIC ID to 2 May 29 16:58:49 angussyd kernel: ioapic0 irqs 0-23 on motherboard May 29 16:58:49 angussyd kernel: SMP: AP CPU #1 Launched! May 29 16:58:49 angussyd kernel: SMP: AP CPU #3 Launched! May 29 16:58:49 angussyd kernel: SMP: AP CPU #2 Launched! May 29 16:58:49 angussyd kernel: Timecounter "TSC-low" frequency 1100035058 Hz quality 1000 May 29 16:58:49 angussyd kernel: ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 16:58:49 angussyd kernel: ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 16:58:49 angussyd kernel: module_register_init: MOD_LOAD (ipw_bss_fw, 0xffffffff80685700, 0) error 1 May 29 16:58:49 angussyd kernel: random: entropy device external interface May 29 16:58:49 angussyd kernel: ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 16:58:49 angussyd kernel: ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 16:58:49 angussyd kernel: module_register_init: MOD_LOAD (ipw_ibss_fw, 0xffffffff806857b0, 0) error 1 May 29 16:58:49 angussyd kernel: ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. May 29 16:58:49 angussyd kernel: ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. May 29 16:58:49 angussyd kernel: module_register_init: MOD_LOAD (ipw_monitor_fw, 0xffffffff80685860, 0) error 1 May 29 16:58:49 angussyd kernel: iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 16:58:49 angussyd kernel: iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 16:58:49 angussyd kernel: module_register_init: MOD_LOAD (iwi_bss_fw, 0xffffffff806ac730, 0) error 1 May 29 16:58:49 angussyd kernel: iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 16:58:49 angussyd kernel: iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 16:58:49 angussyd kernel: module_register_init: MOD_LOAD (iwi_ibss_fw, 0xffffffff806ac7e0, 0) error 1 May 29 16:58:49 angussyd kernel: iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. May 29 16:58:49 angussyd kernel: iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. May 29 16:58:49 angussyd kernel: module_register_init: MOD_LOAD (iwi_monitor_fw, 0xffffffff806ac890, 0) error 1 May 29 16:58:49 angussyd kernel: wlan: mac acl policy registered May 29 16:58:49 angussyd kernel: kbd0 at kbdmux0 May 29 16:58:49 angussyd kernel: netmap: loaded module May 29 16:58:49 angussyd kernel: module_register_init: MOD_LOAD (vesa, 0xffffffff8120faa0, 0) error 19 May 29 16:58:49 angussyd kernel: random: registering fast source Intel Secure Key RNG May 29 16:58:49 angussyd kernel: random: fast provider: "Intel Secure Key RNG" May 29 16:58:49 angussyd kernel: nexus0 May 29 16:58:49 angussyd kernel: vtvga0: on motherboard May 29 16:58:49 angussyd kernel: cryptosoft0: on motherboard May 29 16:58:49 angussyd kernel: padlock0: No ACE support. May 29 16:58:49 angussyd kernel: acpi0: on motherboard May 29 16:58:49 angussyd kernel: acpi0: Power Button (fixed) May 29 16:58:49 angussyd kernel: hpet0: iomem 0xfed00000-0xfed003ff on acpi0 May 29 16:58:49 angussyd kernel: Timecounter "HPET" frequency 24000000 Hz quality 950 May 29 16:58:49 angussyd kernel: Event timer "HPET" frequency 24000000 Hz quality 550 May 29 16:58:49 angussyd kernel: Event timer "HPET1" frequency 24000000 Hz quality 440 May 29 16:58:49 angussyd kernel: Event timer "HPET2" frequency 24000000 Hz quality 440 May 29 16:58:49 angussyd kernel: Event timer "HPET3" frequency 24000000 Hz quality 440 May 29 16:58:49 angussyd kernel: Event timer "HPET4" frequency 24000000 Hz quality 440 May 29 16:58:49 angussyd kernel: cpu0: on acpi0 May 29 16:58:49 angussyd kernel: cpu1: on acpi0 May 29 16:58:49 angussyd kernel: cpu2: on acpi0 May 29 16:58:49 angussyd kernel: cpu3: on acpi0 May 29 16:58:49 angussyd kernel: atrtc0: port 0x70-0x77 on acpi0 May 29 16:58:49 angussyd kernel: atrtc0: Warning: Couldn't map I/O. May 29 16:58:49 angussyd kernel: atrtc0: registered as a time-of-day clock, resolution 1.000000s May 29 16:58:49 angussyd kernel: Event timer "RTC" frequency 32768 Hz quality 0 May 29 16:58:49 angussyd kernel: attimer0: port 0x40-0x43,0x50-0x53 irq 0 on acpi0 May 29 16:58:49 angussyd kernel: Timecounter "i8254" frequency 1193182 Hz quality 0 May 29 16:58:49 angussyd kernel: Event timer "i8254" frequency 1193182 Hz quality 100 May 29 16:58:49 angussyd kernel: Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 May 29 16:58:49 angussyd kernel: acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1808-0x180b on acpi0 May 29 16:58:49 angussyd kernel: acpi_button0: on acpi0 May 29 16:58:49 angussyd kernel: pcib0: port 0xcf8-0xcff on acpi0 May 29 16:58:49 angussyd kernel: pci0: on pcib0 May 29 16:58:49 angussyd kernel: pcib1: irq 18 at device 6.0 on pci0 May 29 16:58:49 angussyd kernel: pci1: on pcib1 May 29 16:58:49 angussyd kernel: pci1: at device 0.0 (no driver attached) May 29 16:58:49 angussyd kernel: pcib2: mem 0xdfe00000-0xdfe1ffff irq 20 at device 14.0 on pci0 May 29 16:58:49 angussyd kernel: pci2: on pcib2 May 29 16:58:49 angussyd kernel: pcib3: mem 0xdfe20000-0xdfe3ffff irq 22 at device 16.0 on pci0 May 29 16:58:49 angussyd kernel: pci3: on pcib3 May 29 16:58:49 angussyd kernel: pcib4: mem 0xdfe40000-0xdfe5ffff irq 23 at device 17.0 on pci0 May 29 16:58:49 angussyd kernel: pci4: on pcib4 May 29 16:58:49 angussyd kernel: ahci0: port 0x1c20-0x1c27,0x1c28-0x1c2b,0x1c00-0x1c1f mem 0xdfe74000-0xdfe75fff,0xdfe7c000-0xdfe7c0ff,0xdfe7a000-0xdfe7a7ff irq 21 at device 20.0 on pci0 May 29 16:58:49 angussyd kernel: ahci0: AHCI v1.31 with 5 6Gbps ports, Port Multiplier supported May 29 16:58:49 angussyd kernel: ahcich1: at channel 1 on ahci0 May 29 16:58:49 angussyd kernel: ahcich3: at channel 3 on ahci0 May 29 16:58:49 angussyd kernel: ahcich4: at channel 4 on ahci0 May 29 16:58:49 angussyd kernel: ahcich5: at channel 5 on ahci0 May 29 16:58:49 angussyd kernel: ahcich6: at channel 6 on ahci0 May 29 16:58:49 angussyd kernel: xhci0: mem 0xdfe60000-0xdfe6ffff irq 19 at device 21.0 on pci0 May 29 16:58:49 angussyd kernel: xhci0: 32 bytes context size, 64-bit DMA May 29 16:58:49 angussyd kernel: usbus0 on xhci0 May 29 16:58:49 angussyd kernel: usbus0: 5.0Gbps Super Speed USB v3.0 May 29 16:58:49 angussyd kernel: pcib5: irq 16 at device 22.0 on pci0 May 29 16:58:49 angussyd kernel: pci5: on pcib5 May 29 16:58:49 angussyd kernel: pcib0: no PRT entry for 0.22.INTB May 29 16:58:49 angussyd kernel: ix0: mem 0xde800000-0xde9fffff,0xdec00000-0xdec03fff irq 16 at device 0.0 on pci5 May 29 16:58:49 angussyd kernel: ix0: Using MSI-X interrupts with 5 vectors May 29 16:58:49 angussyd kernel: ix0: Ethernet address: 00:08:a2:0e:da:4d May 29 16:58:49 angussyd kernel: ix0: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 16:58:49 angussyd kernel: ix1: mem 0xdea00000-0xdebfffff,0xdec04000-0xdec07fff irq 10 at device 0.1 on pci5 May 29 16:58:49 angussyd kernel: ix1: Using MSI-X interrupts with 5 vectors May 29 16:58:49 angussyd kernel: ix1: Ethernet address: 00:08:a2:0e:da:4e May 29 16:58:49 angussyd kernel: ix1: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 16:58:49 angussyd kernel: pcib6: irq 17 at device 23.0 on pci0 May 29 16:58:49 angussyd kernel: pci6: on pcib6 May 29 16:58:49 angussyd kernel: pcib0: no PRT entry for 0.23.INTB May 29 16:58:49 angussyd kernel: ix2: mem 0xdee00000-0xdeffffff,0xdf200000-0xdf203fff irq 17 at device 0.0 on pci6 May 29 16:58:49 angussyd kernel: ix2: Using MSI-X interrupts with 5 vectors May 29 16:58:49 angussyd kernel: ix2: Ethernet address: 00:08:a2:0e:da:4f May 29 16:58:49 angussyd kernel: mdio0: on ix2 May 29 16:58:49 angussyd kernel: e6000sw0: on mdio0 May 29 16:58:49 angussyd kernel: e6000sw0: single-chip addressing mode May 29 16:58:49 angussyd kernel: miibus0: on e6000sw0 May 29 16:58:49 angussyd kernel: e1000phy0: PHY 1 on miibus0 May 29 16:58:49 angussyd kernel: e1000phy0: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:58:49 angussyd kernel: miibus1: on e6000sw0 May 29 16:58:49 angussyd kernel: e1000phy1: PHY 2 on miibus1 May 29 16:58:49 angussyd kernel: e1000phy1: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:58:49 angussyd kernel: miibus2: on e6000sw0 May 29 16:58:49 angussyd kernel: e1000phy2: PHY 3 on miibus2 May 29 16:58:49 angussyd kernel: e1000phy2: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:58:49 angussyd kernel: miibus3: on e6000sw0 May 29 16:58:49 angussyd kernel: e1000phy3: PHY 4 on miibus3 May 29 16:58:49 angussyd kernel: e1000phy3: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:58:49 angussyd kernel: miibus4: on e6000sw0 May 29 16:58:49 angussyd kernel: e1000phy4: PHY 5 on miibus4 May 29 16:58:49 angussyd kernel: e1000phy4: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:58:49 angussyd kernel: miibus5: on e6000sw0 May 29 16:58:49 angussyd kernel: e1000phy5: PHY 6 on miibus5 May 29 16:58:49 angussyd kernel: e1000phy5: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:58:49 angussyd kernel: miibus6: on e6000sw0 May 29 16:58:49 angussyd kernel: e1000phy6: PHY 7 on miibus6 May 29 16:58:49 angussyd kernel: e1000phy6: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:58:49 angussyd kernel: miibus7: on e6000sw0 May 29 16:58:49 angussyd kernel: e1000phy7: PHY 8 on miibus7 May 29 16:58:49 angussyd kernel: e1000phy7: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto May 29 16:58:49 angussyd kernel: e6000sw0: switch is ready. May 29 16:58:49 angussyd kernel: etherswitch0: on e6000sw0 May 29 16:58:49 angussyd kernel: ix2: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 16:58:49 angussyd kernel: e6000sw0port1: link state changed to DOWN May 29 16:58:49 angussyd kernel: e6000sw0port2: link state changed to UP May 29 16:58:49 angussyd kernel: e6000sw0port3: link state changed to DOWN May 29 16:58:49 angussyd kernel: ix3: May 29 16:58:49 angussyd kernel: e6000sw0port4: link state changed to DOWN May 29 16:58:49 angussyd kernel: mem 0xdf000000-0xdf1fffff,0xdf204000-0xdf207fff irq 10 at device 0.1 on pci6 May 29 16:58:49 angussyd kernel: ix3: May 29 16:58:49 angussyd kernel: e6000sw0port5: link state changed to DOWN May 29 16:58:49 angussyd kernel: e6000sw0port6: link state changed to DOWN May 29 16:58:49 angussyd kernel: Using MSI-X interrupts with 5 vectors May 29 16:58:49 angussyd kernel: e6000sw0port7: link state changed to UP May 29 16:58:49 angussyd kernel: e6000sw0port8: link state changed to DOWN May 29 16:58:49 angussyd kernel: ix3: Ethernet address: 00:08:a2:0e:da:50 May 29 16:58:49 angussyd kernel: ix3: netmap queues/slots: TX 4/2048, RX 4/2048 May 29 16:58:49 angussyd kernel: pci0: at device 24.0 (no driver attached) May 29 16:58:49 angussyd kernel: sdhci_pci0: mem 0xdfe77000-0xdfe77fff,0xdfe78000-0xdfe78fff irq 16 at device 28.0 on pci0 May 29 16:58:49 angussyd kernel: sdhci_pci0: 1 slot(s) allocated May 29 16:58:49 angussyd kernel: mmc0: on sdhci_pci0 May 29 16:58:49 angussyd kernel: isab0: at device 31.0 on pci0 May 29 16:58:49 angussyd kernel: isa0: on isab0 May 29 16:58:49 angussyd kernel: pci0: at device 31.2 (no driver attached) May 29 16:58:49 angussyd kernel: pci0: at device 31.5 (no driver attached) May 29 16:58:49 angussyd kernel: uart0: port 0x3f8-0x3ff irq 19 flags 0x10 on acpi0 May 29 16:58:49 angussyd kernel: uart0: console (115200,n,8,1) May 29 16:58:49 angussyd kernel: uart1: port 0x2f8-0x2ff irq 18 on acpi0 May 29 16:58:49 angussyd kernel: orm0: at iomem 0xc0000-0xc0fff,0xee800-0xeffff on isa0 May 29 16:58:49 angussyd kernel: ppc0: cannot reserve I/O port range May 29 16:58:49 angussyd kernel: est0: on cpu0 May 29 16:58:49 angussyd kernel: est1: on cpu1 May 29 16:58:49 angussyd kernel: est2: on cpu2 May 29 16:58:49 angussyd kernel: est3: on cpu3 May 29 16:58:49 angussyd kernel: Timecounters tick every 1.000 msec May 29 16:58:49 angussyd kernel: ugen0.1: <0x8086 XHCI root HUB> at usbus0 May 29 16:58:49 angussyd kernel: uhub0: <0x8086 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0 May 29 16:58:49 angussyd kernel: mmcsd0: 31GB at mmc0 50.0MHz/8bit/65535-block May 29 16:58:49 angussyd kernel: mmcsd0boot0: 4MB partion 1 at mmcsd0 May 29 16:58:49 angussyd kernel: mmcsd0boot1: 4MB partion 2 at mmcsd0 May 29 16:58:49 angussyd kernel: mmcsd0rpmb: 4MB partion 3 at mmcsd0 May 29 16:58:49 angussyd kernel: ada0 at ahcich1 bus 0 scbus0 target 0 lun 0 May 29 16:58:49 angussyd kernel: ada0: ACS-2 ATA SATA 3.x device May 29 16:58:49 angussyd kernel: ada0: Serial Number 1832005701182 May 29 16:58:49 angussyd kernel: ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 512bytes) May 29 16:58:49 angussyd kernel: ada0: Command Queueing enabled May 29 16:58:49 angussyd kernel: ada0: 228936MB (468862128 512 byte sectors) May 29 16:58:49 angussyd kernel: Trying to mount root from ufs:/dev/ufsid/5b0df81c099aa6c1 [rw]... May 29 16:58:49 angussyd kernel: random: unblocking device. May 29 16:58:49 angussyd kernel: uhub0: 8 ports with 8 removable, self powered May 29 16:58:49 angussyd kernel: e6000sw0port3: link state changed to UP May 29 16:58:49 angussyd kernel: e6000sw0port4: link state changed to UP May 29 16:58:49 angussyd kernel: e6000sw0port5: link state changed to UP May 29 16:58:49 angussyd kernel: e6000sw0port6: link state changed to UP May 29 16:58:49 angussyd kernel: e6000sw0port8: link state changed to UP May 29 16:58:49 angussyd kernel: CPU: Intel(R) Atom(TM) CPU C3558 @ 2.20GHz (2200.07-MHz K8-class CPU) May 29 16:58:49 angussyd kernel: Origin="GenuineIntel" Id=0x506f1 Family=0x6 Model=0x5f Stepping=1 May 29 16:58:49 angussyd kernel: Features=0xbfebfbff May 29 16:58:49 angussyd kernel: Features2=0x4ff8ebbf May 29 16:58:49 angussyd kernel: AMD Features=0x2c100800 May 29 16:58:49 angussyd kernel: AMD Features2=0x101 May 29 16:58:49 angussyd kernel: Structured Extended Features=0x2294e283 May 29 16:58:49 angussyd kernel: Structured Extended Features3=0xac000400 May 29 16:58:49 angussyd kernel: XSAVE Features=0xf May 29 16:58:49 angussyd kernel: IA32_ARCH_CAPS=0x69 May 29 16:58:49 angussyd kernel: VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr May 29 16:58:49 angussyd kernel: TSC: P-state invariant, performance statistics May 29 16:58:49 angussyd kernel: padlock0: No ACE support. May 29 16:58:49 angussyd kernel: aesni0: on motherboard May 29 16:58:49 angussyd kernel: coretemp0: on cpu0 May 29 16:58:49 angussyd kernel: coretemp1: on cpu1 May 29 16:58:49 angussyd kernel: coretemp2: on cpu2 May 29 16:58:49 angussyd kernel: coretemp3: on cpu3 May 29 16:58:50 angussyd sshd[12619]: Server listening on :: port 22. May 29 16:58:50 angussyd sshd[12619]: Server listening on 0.0.0.0 port 22. May 29 16:58:50 angussyd syslogd: Logging subprocess 12634 (exec /usr/local/sbin/sshguard) exited due to signal 15. May 29 06:58:53 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 16:58:53 angussyd kernel: May 29 16:58:53 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 06:58:54 angussyd check_reload_status: Linkup starting e6000sw0port3 May 29 16:58:54 angussyd kernel: e6000sw0port3: link state changed to DOWN May 29 06:58:55 angussyd check_reload_status: Linkup starting e6000sw0port4 May 29 16:58:55 angussyd kernel: e6000sw0port4: link state changed to DOWN May 29 06:58:56 angussyd check_reload_status: Linkup starting e6000sw0port5 May 29 16:58:56 angussyd kernel: e6000sw0port5: link state changed to DOWN May 29 06:58:56 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 16:58:56 angussyd kernel: e6000sw0port2: link state changed to UP May 29 06:58:58 angussyd check_reload_status: Linkup starting e6000sw0port6 May 29 16:58:58 angussyd kernel: e6000sw0port6: link state changed to DOWN May 29 06:58:59 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 16:58:59 angussyd kernel: e6000sw0port7: link state changed to DOWN May 29 06:58:59 angussyd check_reload_status: Linkup starting e6000sw0port3 May 29 16:58:59 angussyd kernel: e6000sw0port3: link state changed to UP May 29 06:59:00 angussyd check_reload_status: Linkup starting e6000sw0port8 May 29 16:59:00 angussyd kernel: e6000sw0port8: link state changed to DOWN May 29 06:59:00 angussyd check_reload_status: Linkup starting e6000sw0port4 May 29 16:59:00 angussyd kernel: e6000sw0port4: link state changed to UP May 29 06:59:01 angussyd check_reload_status: Linkup starting lagg0 May 29 16:59:01 angussyd kernel: May 29 16:59:01 angussyd kernel: lagg0: IPv6 addresses on ix2 have been removed before adding it as a member to prevent IPv6 address scope violation. May 29 16:59:01 angussyd kernel: lagg0: link state changed to DOWN May 29 06:59:01 angussyd check_reload_status: Linkup starting e6000sw0port5 May 29 16:59:01 angussyd kernel: e6000sw0port5: link state changed to UP May 29 06:59:01 angussyd check_reload_status: Linkup starting ix2 May 29 16:59:01 angussyd kernel: ix2: link state changed to UP May 29 16:59:01 angussyd kernel: lagg0: link state changed to UP May 29 06:59:01 angussyd check_reload_status: Linkup starting lagg0 May 29 16:59:01 angussyd kernel: lagg0: IPv6 addresses on ix3 have been removed before adding it as a member to prevent IPv6 address scope violation. May 29 06:59:02 angussyd check_reload_status: Linkup starting ix2 May 29 16:59:02 angussyd kernel: May 29 16:59:02 angussyd kernel: ix2: link state changed to DOWN May 29 16:59:02 angussyd kernel: lagg0: link state changed to DOWN May 29 06:59:02 angussyd check_reload_status: Linkup starting lagg0 May 29 06:59:02 angussyd php-cgi: rc.bootup: Interface lan tracking non-existent interface wan May 29 16:59:02 angussyd kernel: vlan0: changing name to 'lagg0.4090' May 29 16:59:02 angussyd kernel: vlan1: changing name to 'lagg0.4091' May 29 06:59:02 angussyd check_reload_status: Linkup starting ix2 May 29 16:59:02 angussyd kernel: ix2: link state changed to UP May 29 16:59:02 angussyd kernel: lagg0: link state changed to UP May 29 16:59:02 angussyd kernel: lagg0.4090: link state changed to UP May 29 16:59:02 angussyd kernel: lagg0.4091: link state changed to UP May 29 06:59:02 angussyd check_reload_status: Linkup starting lagg0 May 29 06:59:02 angussyd check_reload_status: Linkup starting lagg0.4090 May 29 06:59:02 angussyd check_reload_status: Linkup starting lagg0.4091 May 29 06:59:02 angussyd check_reload_status: Linkup starting ix3 May 29 16:59:02 angussyd kernel: ix3: link state changed to UP May 29 16:59:02 angussyd kernel: vlan2: changing name to 'ix1.10' May 29 16:59:02 angussyd kernel: vlan3: changing name to 'ix1.12' May 29 16:59:02 angussyd kernel: vlan4: changing name to 'ix1.15' May 29 06:59:02 angussyd check_reload_status: Linkup starting e6000sw0port6 May 29 16:59:02 angussyd kernel: vlan5: changing name to 'ix1.19' May 29 16:59:02 angussyd kernel: e6000sw0port6: link state changed to UP May 29 06:59:02 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 16:59:02 angussyd kernel: e6000sw0port7: link state changed to UP May 29 06:59:02 angussyd check_reload_status: Linkup starting ix1 May 29 16:59:02 angussyd kernel: ix1: link state changed to UP May 29 16:59:02 angussyd kernel: ix1.19: link state changed to UP May 29 16:59:02 angussyd kernel: ix1.10: link state changed to UP May 29 16:59:02 angussyd kernel: ix1.12: link state changed to UP May 29 16:59:02 angussyd kernel: ix1.15: link state changed to UP May 29 06:59:02 angussyd check_reload_status: Linkup starting ix1.19 May 29 06:59:02 angussyd check_reload_status: Linkup starting ix1.10 May 29 06:59:02 angussyd check_reload_status: Linkup starting ix1.12 May 29 06:59:02 angussyd check_reload_status: Linkup starting ix1.15 May 29 06:59:02 angussyd php-cgi: rc.bootup: Interface lan tracking non-existent interface wan May 29 06:59:02 angussyd php-cgi: rc.bootup: Resyncing OpenVPN instances. May 29 16:59:02 angussyd kernel: done. May 29 16:59:02 angussyd kernel: pflog0: promiscuous mode enabled May 29 06:59:03 angussyd check_reload_status: Linkup starting ix0 May 29 16:59:03 angussyd kernel: .... May 29 16:59:03 angussyd kernel: ix0: link state changed to UP May 29 06:59:04 angussyd check_reload_status: Linkup starting e6000sw0port8 May 29 16:59:04 angussyd kernel: May 29 16:59:04 angussyd kernel: e6000sw0port8: link state changed to UP May 29 06:59:04 angussyd php-cgi: rc.bootup: Default gateway setting as default. May 29 06:59:04 angussyd php-cgi: rc.bootup: Gateway, none 'available' for inet6, use the first one configured. '' May 29 06:59:05 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:59:05 angussyd rc.gateway_alarm[61181]: >>> Gateway alarm: OPT1GW (Addr:27.111.246.205 Alarm:1 RTT:.739ms RTTsd:.220ms Loss:33%) May 29 06:59:05 angussyd check_reload_status: updating dyndns OPT1GW May 29 06:59:05 angussyd check_reload_status: Restarting ipsec tunnels May 29 06:59:05 angussyd check_reload_status: Restarting OpenVPN tunnels/interfaces May 29 06:59:05 angussyd check_reload_status: Reloading filter May 29 06:59:06 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 16:59:06 angussyd sshd[63110]: Unable to negotiate with 218.92.0.209 port 64086: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:59:06 angussyd sshguard[64230]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 06:59:07 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 06:59:08 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 06:59:09 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 06:59:10 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 06:59:11 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 06:59:12 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 06:59:13 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 06:59:14 angussyd php-cgi: rc.bootup: Unbound start waiting on dhcp6c. May 29 06:59:15 angussyd php-cgi: rc.bootup: sync unbound done. May 29 16:59:15 angussyd kernel: done. May 29 16:59:15 angussyd kernel: done. May 29 16:59:16 angussyd kernel: done. May 29 16:59:16 angussyd kernel: done. May 29 06:59:16 angussyd php-cgi: rc.bootup: NTPD is starting up. May 29 16:59:16 angussyd kernel: done. May 29 16:59:16 angussyd kernel: done. May 29 06:59:16 angussyd check_reload_status: Updating all dyndns May 29 16:59:17 angussyd kernel: .done. May 29 16:59:17 angussyd rc.gateway_alarm[5917]: >>> Gateway alarm: OPT1GW (Addr:27.111.246.205 Alarm:0 RTT:4.095ms RTTsd:15.887ms Loss:7%) May 29 06:59:17 angussyd check_reload_status: updating dyndns OPT1GW May 29 06:59:17 angussyd check_reload_status: Restarting ipsec tunnels May 29 06:59:17 angussyd check_reload_status: Restarting OpenVPN tunnels/interfaces May 29 06:59:17 angussyd check_reload_status: Reloading filter May 29 06:59:21 angussyd php-cgi: rc.bootup: Creating rrd update script May 29 16:59:21 angussyd kernel: done. May 29 16:59:21 angussyd root: /etc/rc.d/hostid: WARNING: hostid: unable to figure out a UUID from DMI data, generating a new one May 29 16:59:23 angussyd syslogd: exiting on signal 15 May 29 16:59:24 angussyd syslogd: kernel boot file is /boot/kernel/kernel May 29 16:59:24 angussyd kernel: done. May 29 16:59:24 angussyd kernel: done. May 29 16:59:25 angussyd login: login on ttyv0 as root May 29 16:59:25 angussyd login: login on ttyu0 as root May 29 06:59:25 angussyd check_reload_status: Syncing firewall May 29 16:59:25 angussyd php-cgi: rc.package_reinstall_all: Waiting for Internet connection to update pkg metadata and finish package reinstallation May 29 16:59:49 angussyd sshd[6744]: Unable to negotiate with 218.92.0.209 port 44315: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 16:59:49 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 06:59:58 angussyd php-fpm[250]: /index.php: Successful login for user 'admin' from: 192.168.1.100 (Local Database) May 29 17:00:40 angussyd sshd[20377]: Unable to negotiate with 218.92.0.209 port 45597: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:00:40 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:01:32 angussyd sshd[7745]: Unable to negotiate with 218.92.0.209 port 31725: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:01:32 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:01:32 angussyd sshguard[92312]: Blocking "218.92.0.209/32" for 120 secs (3 attacks in 103 secs, after 1 abuses over 103 secs.) May 29 17:02:16 angussyd login: login on ttyu0 as root May 29 17:03:25 angussyd angussyd.localdomain nginx: 2019/05/29 17:03:25 [error] 86871#100188: *12 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/system_information.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/" May 29 17:04:20 angussyd sshd[79654]: Unable to negotiate with 218.92.0.209 port 23283: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:04:20 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:05:20 angussyd sshd[86273]: Unable to negotiate with 218.92.0.209 port 26353: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:05:20 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:06:31 angussyd sshd[10837]: Unable to negotiate with 218.92.0.209 port 24366: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:06:31 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:06:31 angussyd sshguard[92312]: Blocking "218.92.0.209/32" for 240 secs (3 attacks in 131 secs, after 2 abuses over 402 secs.) May 29 17:08:42 angussyd sshd[10380]: Invalid user jboss from 80.28.234.134 port 45358 May 29 17:08:42 angussyd sshguard[92312]: Attack from "80.28.234.134" on service 100 with danger 10. May 29 17:08:42 angussyd sshd[10380]: user NOUSER login class [preauth] May 29 17:08:43 angussyd sshd[10380]: Received disconnect from 80.28.234.134 port 45358:11: Normal Shutdown, Thank you for playing [preauth] May 29 17:08:43 angussyd sshd[10380]: Disconnected from invalid user jboss 80.28.234.134 port 45358 [preauth] May 29 17:08:43 angussyd sshguard[92312]: Attack from "80.28.234.134" on service 100 with danger 10. May 29 17:11:08 angussyd sshd[12450]: Unable to negotiate with 218.92.0.209 port 29147: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:11:08 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:11:17 angussyd angussyd.localdomain nginx: 2019/05/29 17:11:17 [error] 86871#100188: *12 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/system_information.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/" May 29 17:12:11 angussyd sshd[79815]: Unable to negotiate with 218.92.0.209 port 45627: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:12:11 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:13:17 angussyd sshd[92831]: Unable to negotiate with 218.92.0.209 port 17030: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:13:17 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:13:17 angussyd sshguard[92312]: Blocking "218.92.0.209/32" for 480 secs (3 attacks in 129 secs, after 3 abuses over 808 secs.) May 29 17:17:36 angussyd angussyd.localdomain nginx: 2019/05/29 17:17:36 [error] 86871#100188: *12 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/system_information.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/" May 29 17:19:39 angussyd angussyd.localdomain nginx: 2019/05/29 17:19:39 [error] 86871#100188: *12 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/system_information.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/" May 29 17:22:25 angussyd sshd[34902]: Unable to negotiate with 218.92.0.209 port 55384: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:22:25 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:23:18 angussyd sshd[60975]: Unable to negotiate with 218.92.0.209 port 63570: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:23:18 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:24:09 angussyd sshd[88754]: Unable to negotiate with 218.92.0.209 port 61282: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:24:09 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:24:09 angussyd sshguard[92312]: Blocking "218.92.0.209/32" for 960 secs (3 attacks in 104 secs, after 4 abuses over 1460 secs.) May 29 17:24:25 angussyd sshd[89411]: Invalid user support from 167.99.200.84 port 55346 May 29 17:24:25 angussyd sshguard[92312]: Attack from "167.99.200.84" on service 100 with danger 10. May 29 17:24:25 angussyd sshd[89411]: user NOUSER login class [preauth] May 29 17:24:25 angussyd sshd[89411]: Received disconnect from 167.99.200.84 port 55346:11: Normal Shutdown, Thank you for playing [preauth] May 29 17:24:25 angussyd sshd[89411]: Disconnected from invalid user support 167.99.200.84 port 55346 [preauth] May 29 17:24:25 angussyd sshguard[92312]: Attack from "167.99.200.84" on service 100 with danger 10. May 29 17:25:10 angussyd angussyd.localdomain nginx: 2019/05/29 17:25:10 [error] 86871#100188: *12 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/system_information.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/" May 29 17:25:10 angussyd angussyd.localdomain nginx: 2019/05/29 17:25:10 [error] 86871#100188: *12 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 17:25:10 angussyd angussyd.localdomain nginx: 2019/05/29 17:25:10 [error] 86871#100188: *12 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/" May 29 07:26:10 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 17:26:10 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 17:26:35 angussyd sshd[38272]: Connection closed by 37.193.108.101 port 42864 [preauth] May 29 17:26:35 angussyd sshguard[92312]: Attack from "37.193.108.101" on service 100 with danger 2. May 29 07:28:47 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 17:28:47 angussyd kernel: e6000sw0port2: link state changed to UP May 29 17:28:59 angussyd angussyd.localdomain nginx: 2019/05/29 17:28:59 [error] 86659#100138: *988 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/" May 29 17:28:59 angussyd angussyd.localdomain nginx: 2019/05/29 17:28:59 [error] 86659#100138: *988 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 07:30:13 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 17:30:13 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 17:31:54 angussyd angussyd.localdomain nginx: 2019/05/29 17:31:54 [error] 86871#100188: *995 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 07:33:50 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 17:33:50 angussyd kernel: e6000sw0port2: link state changed to UP May 29 17:36:24 angussyd sshd[96234]: Received disconnect from 142.93.153.234 port 51630:11: Bye Bye [preauth] May 29 17:36:24 angussyd sshd[96234]: Disconnected from 142.93.153.234 port 51630 [preauth] May 29 17:36:24 angussyd sshguard[92312]: Attack from "142.93.153.234" on service 100 with danger 10. May 29 17:36:56 angussyd angussyd.localdomain nginx: 2019/05/29 17:36:56 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/interfaces.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 17:37:21 angussyd sshd[21629]: Invalid user applmgr from 178.128.79.169 port 50818 May 29 17:37:21 angussyd sshguard[92312]: Attack from "178.128.79.169" on service 100 with danger 10. May 29 17:37:21 angussyd sshd[21629]: user NOUSER login class [preauth] May 29 17:37:21 angussyd sshd[21629]: Received disconnect from 178.128.79.169 port 50818:11: Normal Shutdown, Thank you for playing [preauth] May 29 17:37:21 angussyd sshd[21629]: Disconnected from invalid user applmgr 178.128.79.169 port 50818 [preauth] May 29 17:37:21 angussyd sshguard[92312]: Attack from "178.128.79.169" on service 100 with danger 10. May 29 17:39:22 angussyd angussyd.localdomain nginx: 2019/05/29 17:39:22 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "GET / HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1" May 29 17:39:56 angussyd angussyd.localdomain nginx: 2019/05/29 17:39:56 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 17:40:56 angussyd sshd[97865]: Unable to negotiate with 218.92.0.209 port 47850: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:40:56 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:41:50 angussyd sshd[21105]: Unable to negotiate with 218.92.0.209 port 47988: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:41:50 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:42:44 angussyd sshd[46317]: Unable to negotiate with 218.92.0.209 port 47228: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 17:42:44 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 17:42:44 angussyd sshguard[92312]: Blocking "218.92.0.209/32" for 1920 secs (3 attacks in 108 secs, after 5 abuses over 2575 secs.) May 29 17:43:00 angussyd angussyd.localdomain nginx: 2019/05/29 17:43:00 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/interfaces.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 17:46:01 angussyd angussyd.localdomain nginx: 2019/05/29 17:46:01 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 17:49:06 angussyd angussyd.localdomain nginx: 2019/05/29 17:49:06 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/interfaces.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 17:50:18 angussyd sshd[21192]: Connection closed by 148.70.166.52 port 34496 [preauth] May 29 17:50:18 angussyd sshguard[92312]: Attack from "148.70.166.52" on service 100 with danger 2. May 29 17:52:07 angussyd angussyd.localdomain nginx: 2019/05/29 17:52:07 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 17:55:11 angussyd angussyd.localdomain nginx: 2019/05/29 17:55:11 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/interfaces.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 17:58:13 angussyd angussyd.localdomain nginx: 2019/05/29 17:58:13 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 18:01:17 angussyd angussyd.localdomain nginx: 2019/05/29 18:01:17 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/interfaces.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 18:02:59 angussyd sshd[49672]: Did not receive identification string from 222.140.6.8 port 54048 May 29 18:02:59 angussyd sshguard[92312]: Attack from "222.140.6.8" on service 100 with danger 10. May 29 18:04:19 angussyd angussyd.localdomain nginx: 2019/05/29 18:04:19 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 18:04:28 angussyd sshd[49770]: Received disconnect from 142.93.157.35 port 49456:11: Bye Bye [preauth] May 29 18:04:28 angussyd sshd[49770]: Disconnected from 142.93.157.35 port 49456 [preauth] May 29 18:04:28 angussyd sshguard[92312]: Attack from "142.93.157.35" on service 100 with danger 10. May 29 18:07:23 angussyd angussyd.localdomain nginx: 2019/05/29 18:07:23 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/interfaces.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 18:08:38 angussyd sshd[49973]: Invalid user qhsupport from 130.211.246.128 port 47168 May 29 18:08:38 angussyd sshguard[92312]: Attack from "130.211.246.128" on service 100 with danger 10. May 29 18:08:38 angussyd sshd[49973]: user NOUSER login class [preauth] May 29 18:08:38 angussyd sshd[49973]: Received disconnect from 130.211.246.128 port 47168:11: Normal Shutdown, Thank you for playing [preauth] May 29 18:08:38 angussyd sshd[49973]: Disconnected from invalid user qhsupport 130.211.246.128 port 47168 [preauth] May 29 18:08:38 angussyd sshguard[92312]: Attack from "130.211.246.128" on service 100 with danger 10. May 29 18:10:25 angussyd angussyd.localdomain nginx: 2019/05/29 18:10:25 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 18:12:44 angussyd angussyd.localdomain nginx: 2019/05/29 18:12:44 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "GET / HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1" May 29 18:13:29 angussyd angussyd.localdomain nginx: 2019/05/29 18:13:29 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /widgets/widgets/interfaces.widget.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 18:15:26 angussyd sshd[50722]: Unable to negotiate with 218.92.0.209 port 16789: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 18:15:26 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 18:16:18 angussyd sshd[51245]: Unable to negotiate with 218.92.0.209 port 19703: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 18:16:18 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 18:16:31 angussyd angussyd.localdomain nginx: 2019/05/29 18:16:31 [error] 86871#100188: *1004 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "POST /getstats.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1", referrer: "https://192.168.1.1/index.php" May 29 18:17:11 angussyd sshd[51342]: Unable to negotiate with 218.92.0.209 port 24631: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 18:17:11 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 18:17:11 angussyd sshguard[92312]: Blocking "218.92.0.209/32" for 3840 secs (3 attacks in 105 secs, after 6 abuses over 4642 secs.) May 29 18:25:19 angussyd angussyd.localdomain nginx: 2019/05/29 18:25:19 [error] 86871#100188: *1125 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "GET / HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1" May 29 18:32:43 angussyd sshd[51520]: user admin login class [preauth] May 29 18:32:43 angussyd sshd[51520]: user admin login class [preauth] May 29 18:32:43 angussyd sshd[51520]: user admin login class [preauth] May 29 18:32:43 angussyd sshd[51520]: Accepted publickey for admin from 192.168.1.100 port 63968 ssh2: RSA SHA256:64rtLAhN8dC/6fonvpIidF/HjsZgWThxA845wCR64Hs May 29 18:43:15 angussyd sshd[56746]: Received disconnect from 209.97.142.24 port 53836:11: Bye Bye [preauth] May 29 18:43:15 angussyd sshd[56746]: Disconnected from 209.97.142.24 port 53836 [preauth] May 29 18:43:15 angussyd sshguard[92312]: Attack from "209.97.142.24" on service 100 with danger 10. May 29 18:46:35 angussyd sshd[56883]: Connection closed by 152.136.34.52 port 51834 [preauth] May 29 18:46:35 angussyd sshguard[92312]: Attack from "152.136.34.52" on service 100 with danger 2. May 29 19:02:28 angussyd sshd[57151]: Did not receive identification string from 174.138.2.157 port 51220 May 29 19:02:28 angussyd sshguard[92312]: Attack from "174.138.2.157" on service 100 with danger 10. May 29 19:08:40 angussyd sshd[57397]: user root login class [preauth] May 29 19:08:40 angussyd sshd[57397]: Received disconnect from 167.99.230.57 port 40104:11: Normal Shutdown, Thank you for playing [preauth] May 29 19:08:40 angussyd sshd[57397]: Disconnected from authenticating user root 167.99.230.57 port 40104 [preauth] May 29 19:08:40 angussyd sshguard[92312]: Attack from "167.99.230.57" on service 100 with danger 10. May 29 09:11:33 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 19:11:33 angussyd kernel: e6000sw0port7: link state changed to DOWN May 29 09:11:36 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 19:11:36 angussyd kernel: e6000sw0port7: link state changed to UP May 29 19:16:48 angussyd angussyd.localdomain nginx: 2019/05/29 19:16:48 [error] 86871#100188: *1235 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "GET / HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1" May 29 09:20:50 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 19:20:50 angussyd kernel: e6000sw0port7: link state changed to DOWN May 29 09:20:53 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 19:20:53 angussyd kernel: e6000sw0port7: link state changed to UP May 29 09:21:40 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 19:21:40 angussyd kernel: e6000sw0port7: link state changed to DOWN May 29 09:21:42 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 19:21:42 angussyd kernel: e6000sw0port7: link state changed to UP May 29 19:21:49 angussyd sshd[58731]: Unable to negotiate with 218.92.0.209 port 34707: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 19:21:49 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 19:22:41 angussyd sshd[58953]: Unable to negotiate with 218.92.0.209 port 46821: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 19:22:41 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 09:23:05 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 19:23:05 angussyd kernel: e6000sw0port7: link state changed to DOWN May 29 09:23:08 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 19:23:08 angussyd kernel: e6000sw0port7: link state changed to UP May 29 19:23:35 angussyd sshd[59483]: Unable to negotiate with 218.92.0.209 port 47317: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 19:23:35 angussyd sshguard[92312]: Attack from "218.92.0.209" on service 100 with danger 10. May 29 19:23:35 angussyd sshguard[92312]: Blocking "218.92.0.209/32" for 7680 secs (3 attacks in 106 secs, after 7 abuses over 8626 secs.) May 29 09:24:21 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 19:24:21 angussyd kernel: e6000sw0port7: link state changed to DOWN May 29 09:24:23 angussyd check_reload_status: Linkup starting e6000sw0port7 May 29 19:24:23 angussyd kernel: e6000sw0port7: link state changed to UP May 29 19:27:36 angussyd sshd[60576]: user admin login class [preauth] May 29 19:27:36 angussyd sshd[60576]: Received disconnect from 194.182.69.116 port 36272:11: Normal Shutdown, Thank you for playing [preauth] May 29 19:27:36 angussyd sshd[60576]: Disconnected from authenticating user admin 194.182.69.116 port 36272 [preauth] May 29 19:27:36 angussyd sshguard[92312]: Attack from "194.182.69.116" on service 100 with danger 10. May 29 19:38:11 angussyd sshd[61097]: user root login class [preauth] May 29 19:38:11 angussyd sshd[61097]: Received disconnect from 159.65.175.37 port 34194:11: Normal Shutdown, Thank you for playing [preauth] May 29 19:38:11 angussyd sshd[61097]: Disconnected from authenticating user root 159.65.175.37 port 34194 [preauth] May 29 19:38:11 angussyd sshguard[92312]: Attack from "159.65.175.37" on service 100 with danger 10. May 29 09:43:09 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 19:43:09 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 09:44:15 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 19:44:15 angussyd kernel: e6000sw0port2: link state changed to UP May 29 09:47:40 angussyd check_reload_status: Linkup starting e6000sw0port2 May 29 19:47:40 angussyd kernel: e6000sw0port2: link state changed to DOWN May 29 19:50:22 angussyd angussyd.localdomain nginx: 2019/05/29 19:50:22 [error] 86871#100188: *1304 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.1.100, server: , request: "GET / HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "192.168.1.1" May 29 19:52:56 angussyd sshd[62818]: user admin login class [preauth] May 29 19:52:56 angussyd sshd[62818]: Disconnecting authenticating user admin 185.232.67.11 port 44602: Change of username or service not allowed: (admin,ssh-connection) -> (user,ssh-connection) [preauth] May 29 20:24:34 angussyd sshd[63413]: Connection closed by 93.50.120.77 port 63359 [preauth] May 29 20:24:34 angussyd sshguard[92312]: Attack from "93.50.120.77" on service 100 with danger 2. May 29 20:39:42 angussyd sshd[63875]: user root login class [preauth] May 29 20:39:42 angussyd sshd[63875]: Received disconnect from 159.65.136.194 port 56902:11: Normal Shutdown, Thank you for playing [preauth] May 29 20:39:42 angussyd sshd[63875]: Disconnected from authenticating user root 159.65.136.194 port 56902 [preauth] May 29 20:39:42 angussyd sshguard[92312]: Attack from "159.65.136.194" on service 100 with danger 10. May 29 20:48:38 angussyd sshd[64311]: Invalid user applmgr from 139.59.59.187 port 56346 May 29 20:48:38 angussyd sshguard[92312]: Attack from "139.59.59.187" on service 100 with danger 10. May 29 20:48:38 angussyd sshd[64311]: user NOUSER login class [preauth] May 29 20:48:39 angussyd sshd[64311]: Received disconnect from 139.59.59.187 port 56346:11: Normal Shutdown, Thank you for playing [preauth] May 29 20:48:39 angussyd sshd[64311]: Disconnected from invalid user applmgr 139.59.59.187 port 56346 [preauth] May 29 20:48:39 angussyd sshguard[92312]: Attack from "139.59.59.187" on service 100 with danger 10. May 29 21:03:50 angussyd sshd[65147]: Unable to negotiate with 218.92.0.204 port 47287: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:03:50 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:05:00 angussyd sshd[65587]: Unable to negotiate with 218.92.0.204 port 62982: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:05:00 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:05:01 angussyd sshd[65838]: Connection closed by 58.59.2.26 port 36292 [preauth] May 29 21:05:01 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 21:07:04 angussyd sshd[66417]: Unable to negotiate with 218.92.0.204 port 15483: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:07:04 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:07:04 angussyd sshguard[92312]: Blocking "218.92.0.204/32" for 120 secs (3 attacks in 194 secs, after 1 abuses over 194 secs.) May 29 21:09:25 angussyd sshd[67360]: Unable to negotiate with 218.92.0.204 port 62427: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:09:25 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:10:48 angussyd sshd[67797]: Unable to negotiate with 218.92.0.204 port 39418: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:10:48 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:12:05 angussyd sshd[68388]: Unable to negotiate with 218.92.0.204 port 21961: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:12:05 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:12:05 angussyd sshguard[92312]: Blocking "218.92.0.204/32" for 240 secs (3 attacks in 160 secs, after 2 abuses over 495 secs.) May 29 21:15:27 angussyd sshd[69071]: Connection closed by 103.105.98.1 port 60792 [preauth] May 29 21:15:27 angussyd sshguard[92312]: Attack from "103.105.98.1" on service 100 with danger 2. May 29 21:17:08 angussyd sshd[69419]: Connection closed by 58.59.2.26 port 60480 [preauth] May 29 21:17:08 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 21:17:12 angussyd sshd[69915]: Unable to negotiate with 218.92.0.204 port 17769: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:17:12 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:19:58 angussyd sshd[70284]: Unable to negotiate with 218.92.0.204 port 28104: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:19:58 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:21:21 angussyd sshd[70394]: Unable to negotiate with 218.92.0.204 port 49588: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:21:21 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:21:21 angussyd sshguard[92312]: Blocking "218.92.0.204/32" for 480 secs (3 attacks in 249 secs, after 3 abuses over 1051 secs.) May 29 21:23:26 angussyd sshd[70887]: Connection closed by 185.228.137.125 port 54874 [preauth] May 29 21:23:26 angussyd sshguard[92312]: Attack from "185.228.137.125" on service 100 with danger 2. May 29 21:25:47 angussyd sshd[71129]: Connection closed by 58.59.2.26 port 35718 [preauth] May 29 21:25:47 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 21:28:31 angussyd sshd[71286]: Connection closed by 176.31.252.148 port 33604 [preauth] May 29 21:28:31 angussyd sshguard[92312]: Attack from "176.31.252.148" on service 100 with danger 2. May 29 21:29:22 angussyd sshd[71668]: Connection closed by 142.93.50.178 port 46876 [preauth] May 29 21:29:22 angussyd sshguard[92312]: Attack from "142.93.50.178" on service 100 with danger 2. May 29 21:29:30 angussyd sshd[72344]: Unable to negotiate with 218.92.0.204 port 51807: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:29:30 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:30:46 angussyd sshd[72759]: Unable to negotiate with 218.92.0.204 port 30407: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:30:46 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:32:05 angussyd sshd[73115]: Unable to negotiate with 218.92.0.204 port 39049: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:32:05 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:32:05 angussyd sshguard[92312]: Blocking "218.92.0.204/32" for 960 secs (3 attacks in 155 secs, after 4 abuses over 1695 secs.) May 29 21:34:14 angussyd sshd[73503]: Connection closed by 58.59.2.26 port 41044 [preauth] May 29 21:34:14 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 21:35:02 angussyd sshd[73888]: Invalid user hadoop from 198.211.99.103 port 60230 May 29 21:35:02 angussyd sshguard[92312]: Attack from "198.211.99.103" on service 100 with danger 10. May 29 21:35:02 angussyd sshd[73888]: user NOUSER login class [preauth] May 29 21:35:02 angussyd sshd[73888]: Received disconnect from 198.211.99.103 port 60230:11: Normal Shutdown, Thank you for playing [preauth] May 29 21:35:02 angussyd sshd[73888]: Disconnected from invalid user hadoop 198.211.99.103 port 60230 [preauth] May 29 21:35:02 angussyd sshguard[92312]: Attack from "198.211.99.103" on service 100 with danger 10. May 29 21:40:23 angussyd sshd[74058]: Invalid user zu from 188.93.235.226 port 46832 May 29 21:40:23 angussyd sshguard[92312]: Attack from "188.93.235.226" on service 100 with danger 10. May 29 21:40:23 angussyd sshd[74058]: user NOUSER login class [preauth] May 29 21:40:23 angussyd sshd[74058]: Received disconnect from 188.93.235.226 port 46832:11: Bye Bye [preauth] May 29 21:40:23 angussyd sshd[74058]: Disconnected from invalid user zu 188.93.235.226 port 46832 [preauth] May 29 21:40:23 angussyd sshguard[92312]: Attack from "188.93.235.226" on service 100 with danger 10. May 29 21:42:32 angussyd sshd[74427]: Connection closed by 58.59.2.26 port 53528 [preauth] May 29 21:42:32 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 21:42:38 angussyd sshd[74790]: Connection closed by 89.39.142.34 port 42132 [preauth] May 29 21:42:38 angussyd sshguard[92312]: Attack from "89.39.142.34" on service 100 with danger 2. May 29 21:49:08 angussyd sshd[75254]: Unable to negotiate with 218.92.0.204 port 27054: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:49:08 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:50:17 angussyd sshd[75805]: Unable to negotiate with 218.92.0.204 port 24501: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:50:17 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:50:57 angussyd sshd[76167]: Connection closed by 58.59.2.26 port 48342 [preauth] May 29 21:50:57 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 21:51:04 angussyd sshd[76479]: user admin login class [preauth] May 29 21:51:04 angussyd sshd[76479]: user admin login class [preauth] May 29 21:51:04 angussyd sshd[76479]: user admin login class [preauth] May 29 21:51:04 angussyd sshd[76479]: Accepted publickey for admin from 115.70.36.138 port 46481 ssh2: RSA SHA256:64rtLAhN8dC/6fonvpIidF/HjsZgWThxA845wCR64Hs May 29 21:51:29 angussyd sshd[80427]: Unable to negotiate with 218.92.0.204 port 56914: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 21:51:29 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 21:51:29 angussyd sshguard[92312]: Blocking "218.92.0.204/32" for 1920 secs (3 attacks in 141 secs, after 5 abuses over 2859 secs.) May 29 21:55:55 angussyd sshd[80788]: Invalid user scaner from 164.132.230.244 port 45592 May 29 21:55:55 angussyd sshguard[92312]: Attack from "164.132.230.244" on service 100 with danger 10. May 29 21:55:55 angussyd sshd[80788]: user NOUSER login class [preauth] May 29 21:55:55 angussyd sshd[80788]: Received disconnect from 164.132.230.244 port 45592:11: Normal Shutdown, Thank you for playing [preauth] May 29 21:55:55 angussyd sshd[80788]: Disconnected from invalid user scaner 164.132.230.244 port 45592 [preauth] May 29 21:55:55 angussyd sshguard[92312]: Attack from "164.132.230.244" on service 100 with danger 10. May 29 21:59:02 angussyd sshd[81233]: Connection closed by 58.59.2.26 port 35810 [preauth] May 29 21:59:02 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 22:07:18 angussyd sshd[81984]: Connection closed by 58.59.2.26 port 58390 [preauth] May 29 22:07:18 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 22:12:20 angussyd sshd[82249]: Did not receive identification string from 178.128.47.207 port 53087 May 29 22:12:20 angussyd sshguard[92312]: Attack from "178.128.47.207" on service 100 with danger 10. May 29 22:15:35 angussyd sshd[82562]: Connection closed by 58.59.2.26 port 44852 [preauth] May 29 22:15:35 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 22:17:22 angussyd sshd[82615]: Did not receive identification string from 139.59.42.211 port 48435 May 29 22:17:22 angussyd sshguard[92312]: Attack from "139.59.42.211" on service 100 with danger 10. May 29 22:24:00 angussyd sshd[82821]: Connection closed by 58.59.2.26 port 38398 [preauth] May 29 22:24:00 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 22:24:01 angussyd sshd[83183]: Unable to negotiate with 218.92.0.204 port 33664: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 22:24:01 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 22:24:16 angussyd sshd[83297]: Connection closed by 193.124.178.129 port 29114 [preauth] May 29 22:24:16 angussyd sshguard[92312]: Attack from "193.124.178.129" on service 100 with danger 2. May 29 22:25:28 angussyd sshd[83560]: Unable to negotiate with 218.92.0.204 port 37099: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 22:25:28 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 22:26:29 angussyd sshd[83947]: Connection closed by 165.227.131.210 port 48651 [preauth] May 29 22:26:29 angussyd sshguard[92312]: Attack from "165.227.131.210" on service 100 with danger 2. May 29 22:26:37 angussyd sshd[84212]: Unable to negotiate with 218.92.0.204 port 24736: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 22:26:37 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 22:26:37 angussyd sshguard[92312]: Blocking "218.92.0.204/32" for 3840 secs (3 attacks in 156 secs, after 6 abuses over 4967 secs.) May 29 22:32:17 angussyd sshd[84455]: Connection closed by 58.59.2.26 port 40832 [preauth] May 29 22:32:17 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 22:40:27 angussyd sshd[84588]: Connection closed by 58.59.2.26 port 35386 [preauth] May 29 22:40:27 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 29 22:46:51 angussyd sshd[84986]: Invalid user qweasdzxc from 82.6.38.130 port 59852 May 29 22:46:51 angussyd sshguard[92312]: Attack from "82.6.38.130" on service 100 with danger 10. May 29 22:46:51 angussyd sshd[84986]: user NOUSER login class [preauth] May 29 22:46:51 angussyd sshd[84986]: Received disconnect from 82.6.38.130 port 59852:11: Bye Bye [preauth] May 29 22:46:51 angussyd sshd[84986]: Disconnected from invalid user qweasdzxc 82.6.38.130 port 59852 [preauth] May 29 22:46:51 angussyd sshguard[92312]: Attack from "82.6.38.130" on service 100 with danger 10. May 29 23:14:22 angussyd sshd[85724]: Invalid user jboss from 128.199.255.146 port 37610 May 29 23:14:22 angussyd sshguard[92312]: Attack from "128.199.255.146" on service 100 with danger 10. May 29 23:14:22 angussyd sshd[85724]: user NOUSER login class [preauth] May 29 23:14:22 angussyd sshd[85724]: Received disconnect from 128.199.255.146 port 37610:11: Normal Shutdown, Thank you for playing [preauth] May 29 23:14:22 angussyd sshd[85724]: Disconnected from invalid user jboss 128.199.255.146 port 37610 [preauth] May 29 23:14:22 angussyd sshguard[92312]: Attack from "128.199.255.146" on service 100 with danger 10. May 29 23:31:28 angussyd sshd[85900]: Unable to negotiate with 218.92.0.204 port 59988: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 23:31:28 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 23:32:55 angussyd sshd[86025]: Unable to negotiate with 218.92.0.204 port 58129: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 23:32:55 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 23:34:12 angussyd sshd[86534]: Connection closed by 188.18.87.255 port 52970 [preauth] May 29 23:34:12 angussyd sshguard[92312]: Attack from "188.18.87.255" on service 100 with danger 2. May 29 23:34:19 angussyd sshd[86887]: Unable to negotiate with 218.92.0.204 port 38336: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 23:34:19 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 29 23:34:19 angussyd sshguard[92312]: Blocking "218.92.0.204/32" for 7680 secs (3 attacks in 171 secs, after 7 abuses over 9029 secs.) May 29 23:35:45 angussyd sshd[87432]: Invalid user user from 104.248.235.0 port 44004 May 29 23:35:45 angussyd sshguard[92312]: Attack from "104.248.235.0" on service 100 with danger 10. May 29 23:35:45 angussyd sshd[87432]: user NOUSER login class [preauth] May 29 23:35:45 angussyd sshd[87432]: Received disconnect from 104.248.235.0 port 44004:11: Normal Shutdown, Thank you for playing [preauth] May 29 23:35:45 angussyd sshd[87432]: Disconnected from invalid user user 104.248.235.0 port 44004 [preauth] May 29 23:35:45 angussyd sshguard[92312]: Attack from "104.248.235.0" on service 100 with danger 10. May 29 23:36:20 angussyd sshd[87674]: Connection closed by 197.248.16.118 port 41226 [preauth] May 29 23:36:20 angussyd sshguard[92312]: Attack from "197.248.16.118" on service 100 with danger 2. May 29 23:36:28 angussyd sshd[88044]: user admin login class [preauth] May 29 23:36:29 angussyd sshd[88044]: Connection closed by authenticating user admin 14.186.42.9 port 21379 [preauth] May 29 23:37:19 angussyd sshd[88463]: Did not receive identification string from 129.204.84.110 port 50644 May 29 23:37:19 angussyd sshguard[92312]: Attack from "129.204.84.110" on service 100 with danger 10. May 29 23:38:51 angussyd sshd[88521]: Connection closed by 111.231.112.36 port 52092 [preauth] May 29 23:38:51 angussyd sshguard[92312]: Attack from "111.231.112.36" on service 100 with danger 2. May 29 23:41:28 angussyd sshd[88843]: Connection closed by 201.233.220.125 port 59038 [preauth] May 29 23:41:28 angussyd sshguard[92312]: Attack from "201.233.220.125" on service 100 with danger 2. May 29 23:57:10 angussyd sshd[89157]: Received disconnect from 35.194.249.250 port 36784:11: Bye Bye [preauth] May 29 23:57:10 angussyd sshd[89157]: Disconnected from 35.194.249.250 port 36784 [preauth] May 29 23:57:10 angussyd sshguard[92312]: Attack from "35.194.249.250" on service 100 with danger 10. May 30 00:00:05 angussyd sshd[89873]: Connection closed by 173.12.157.141 port 45841 [preauth] May 30 00:00:05 angussyd sshguard[92312]: Attack from "173.12.157.141" on service 100 with danger 2. May 30 00:03:30 angussyd sshd[92043]: Invalid user samba from 139.59.79.56 port 60366 May 30 00:03:30 angussyd sshguard[92312]: Attack from "139.59.79.56" on service 100 with danger 10. May 30 00:03:30 angussyd sshd[92043]: user NOUSER login class [preauth] May 30 00:03:30 angussyd sshd[92043]: Received disconnect from 139.59.79.56 port 60366:11: Normal Shutdown, Thank you for playing [preauth] May 30 00:03:30 angussyd sshd[92043]: Disconnected from invalid user samba 139.59.79.56 port 60366 [preauth] May 30 00:03:30 angussyd sshguard[92312]: Attack from "139.59.79.56" on service 100 with danger 10. May 30 00:03:54 angussyd sshd[92281]: Connection closed by 216.7.159.250 port 44176 [preauth] May 30 00:03:54 angussyd sshguard[92312]: Attack from "216.7.159.250" on service 100 with danger 2. May 30 00:07:54 angussyd sshd[92455]: Invalid user ubuntu from 125.212.254.144 port 46866 May 30 00:07:54 angussyd sshguard[92312]: Attack from "125.212.254.144" on service 100 with danger 10. May 30 00:07:54 angussyd sshd[92455]: user NOUSER login class [preauth] May 30 00:07:54 angussyd sshd[92455]: Received disconnect from 125.212.254.144 port 46866:11: Normal Shutdown, Thank you for playing [preauth] May 30 00:07:54 angussyd sshd[92455]: Disconnected from invalid user ubuntu 125.212.254.144 port 46866 [preauth] May 30 00:07:54 angussyd sshguard[92312]: Attack from "125.212.254.144" on service 100 with danger 10. May 30 00:20:10 angussyd sshd[92744]: Invalid user user from 46.101.27.6 port 43248 May 30 00:20:10 angussyd sshguard[92312]: Attack from "46.101.27.6" on service 100 with danger 10. May 30 00:20:10 angussyd sshd[92744]: user NOUSER login class [preauth] May 30 00:20:10 angussyd sshd[92744]: Received disconnect from 46.101.27.6 port 43248:11: Normal Shutdown, Thank you for playing [preauth] May 30 00:20:10 angussyd sshd[92744]: Disconnected from invalid user user 46.101.27.6 port 43248 [preauth] May 30 00:20:10 angussyd sshguard[92312]: Attack from "46.101.27.6" on service 100 with danger 10. May 30 00:21:54 angussyd sshd[76479]: Received disconnect from 115.70.36.138 port 46481:11: disconnected by user May 30 00:21:54 angussyd sshd[76479]: Disconnected from user admin 115.70.36.138 port 46481 May 30 00:24:40 angussyd sshd[93138]: Unable to negotiate with 193.201.224.211 port 56265: no matching cipher found. Their offer: aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc,none [preauth] May 30 00:24:40 angussyd sshguard[92312]: Attack from "193.201.224.211" on service 100 with danger 10. May 30 00:31:37 angussyd sshd[93749]: Invalid user usuario from 202.88.241.107 port 36454 May 30 00:31:37 angussyd sshguard[92312]: Attack from "202.88.241.107" on service 100 with danger 10. May 30 00:31:37 angussyd sshd[93749]: user NOUSER login class [preauth] May 30 00:31:37 angussyd sshd[93749]: Received disconnect from 202.88.241.107 port 36454:11: Normal Shutdown, Thank you for playing [preauth] May 30 00:31:37 angussyd sshd[93749]: Disconnected from invalid user usuario 202.88.241.107 port 36454 [preauth] May 30 00:31:37 angussyd sshguard[92312]: Attack from "202.88.241.107" on service 100 with danger 10. May 30 00:55:50 angussyd sshd[94320]: Did not receive identification string from 165.227.180.210 port 52311 May 30 00:55:50 angussyd sshguard[92312]: Attack from "165.227.180.210" on service 100 with danger 10. May 30 00:59:41 angussyd sshd[94393]: Invalid user castis from 110.45.145.178 port 39058 May 30 00:59:41 angussyd sshguard[92312]: Attack from "110.45.145.178" on service 100 with danger 10. May 30 00:59:41 angussyd sshd[94393]: user NOUSER login class [preauth] May 30 00:59:41 angussyd sshd[94393]: Received disconnect from 110.45.145.178 port 39058:11: Normal Shutdown, Thank you for playing [preauth] May 30 00:59:41 angussyd sshd[94393]: Disconnected from invalid user castis 110.45.145.178 port 39058 [preauth] May 30 00:59:41 angussyd sshguard[92312]: Attack from "110.45.145.178" on service 100 with danger 10. May 30 01:01:21 angussyd sshd[2207]: Connection closed by 202.216.14.236 port 37640 [preauth] May 30 01:01:21 angussyd sshguard[92312]: Attack from "202.216.14.236" on service 100 with danger 2. May 30 01:19:13 angussyd sshd[2494]: Unable to negotiate with 118.194.132.112 port 40577: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 01:19:13 angussyd sshguard[92312]: Attack from "118.194.132.112" on service 100 with danger 10. May 30 01:34:30 angussyd sshd[2974]: user root login class [preauth] May 30 01:34:30 angussyd sshd[2974]: Received disconnect from 139.59.9.58 port 40626:11: Normal Shutdown, Thank you for playing [preauth] May 30 01:34:30 angussyd sshd[2974]: Disconnected from authenticating user root 139.59.9.58 port 40626 [preauth] May 30 01:34:30 angussyd sshguard[92312]: Attack from "139.59.9.58" on service 100 with danger 10. May 30 02:03:04 angussyd sshd[3748]: Connection closed by 140.143.208.180 port 46118 [preauth] May 30 02:03:04 angussyd sshguard[92312]: Attack from "140.143.208.180" on service 100 with danger 2. May 30 02:11:40 angussyd sshd[4240]: Did not receive identification string from 162.243.151.46 port 51254 May 30 02:11:40 angussyd sshguard[92312]: Attack from "162.243.151.46" on service 100 with danger 10. May 30 02:22:08 angussyd sshd[4406]: Invalid user postgres from 151.80.153.174 port 57988 May 30 02:22:08 angussyd sshguard[92312]: Attack from "151.80.153.174" on service 100 with danger 10. May 30 02:22:08 angussyd sshd[4406]: user NOUSER login class [preauth] May 30 02:22:08 angussyd sshd[4406]: Received disconnect from 151.80.153.174 port 57988:11: Normal Shutdown, Thank you for playing [preauth] May 30 02:22:08 angussyd sshd[4406]: Disconnected from invalid user postgres 151.80.153.174 port 57988 [preauth] May 30 02:22:08 angussyd sshguard[92312]: Attack from "151.80.153.174" on service 100 with danger 10. May 30 02:27:57 angussyd sshd[4667]: Invalid user postgres from 46.101.27.6 port 46920 May 30 02:27:57 angussyd sshguard[92312]: Attack from "46.101.27.6" on service 100 with danger 10. May 30 02:27:57 angussyd sshd[4667]: user NOUSER login class [preauth] May 30 02:27:57 angussyd sshd[4667]: Received disconnect from 46.101.27.6 port 46920:11: Normal Shutdown, Thank you for playing [preauth] May 30 02:27:57 angussyd sshd[4667]: Disconnected from invalid user postgres 46.101.27.6 port 46920 [preauth] May 30 02:27:57 angussyd sshguard[92312]: Attack from "46.101.27.6" on service 100 with danger 10. May 30 02:38:54 angussyd sshd[5713]: Invalid user applmgr from 178.62.57.246 port 43358 May 30 02:38:54 angussyd sshguard[92312]: Attack from "178.62.57.246" on service 100 with danger 10. May 30 02:38:54 angussyd sshd[5713]: user NOUSER login class [preauth] May 30 02:38:54 angussyd sshd[5713]: Received disconnect from 178.62.57.246 port 43358:11: Normal Shutdown, Thank you for playing [preauth] May 30 02:38:54 angussyd sshd[5713]: Disconnected from invalid user applmgr 178.62.57.246 port 43358 [preauth] May 30 02:38:54 angussyd sshguard[92312]: Attack from "178.62.57.246" on service 100 with danger 10. May 30 02:42:34 angussyd sshd[6080]: Invalid user prueba from 45.28.140.219 port 39862 May 30 02:42:34 angussyd sshguard[92312]: Attack from "45.28.140.219" on service 100 with danger 10. May 30 02:42:34 angussyd sshd[6080]: user NOUSER login class [preauth] May 30 02:42:35 angussyd sshd[6080]: Received disconnect from 45.28.140.219 port 39862:11: Normal Shutdown, Thank you for playing [preauth] May 30 02:42:35 angussyd sshd[6080]: Disconnected from invalid user prueba 45.28.140.219 port 39862 [preauth] May 30 02:42:35 angussyd sshguard[92312]: Attack from "45.28.140.219" on service 100 with danger 10. May 30 02:46:35 angussyd sshd[6416]: Connection closed by 79.60.102.44 port 44764 [preauth] May 30 02:46:35 angussyd sshguard[92312]: Attack from "79.60.102.44" on service 100 with danger 2. May 30 02:55:32 angussyd sshd[6838]: Connection closed by 119.29.11.214 port 51667 [preauth] May 30 02:55:32 angussyd sshguard[92312]: Attack from "119.29.11.214" on service 100 with danger 2. May 30 03:11:06 angussyd sshd[7575]: user root login class [preauth] May 30 03:11:06 angussyd sshd[7575]: Received disconnect from 188.166.72.240 port 51312:11: Normal Shutdown, Thank you for playing [preauth] May 30 03:11:06 angussyd sshd[7575]: Disconnected from authenticating user root 188.166.72.240 port 51312 [preauth] May 30 03:11:06 angussyd sshguard[92312]: Attack from "188.166.72.240" on service 100 with danger 10. May 30 03:20:11 angussyd sshd[7858]: user root login class [preauth] May 30 03:20:11 angussyd sshd[7858]: Received disconnect from 206.189.136.160 port 48046:11: Normal Shutdown, Thank you for playing [preauth] May 30 03:20:11 angussyd sshd[7858]: Disconnected from authenticating user root 206.189.136.160 port 48046 [preauth] May 30 03:20:11 angussyd sshguard[92312]: Attack from "206.189.136.160" on service 100 with danger 10. May 30 03:27:20 angussyd sshd[8252]: Invalid user zimbra from 106.51.130.196 port 35730 May 30 03:27:20 angussyd sshguard[92312]: Attack from "106.51.130.196" on service 100 with danger 10. May 30 03:27:20 angussyd sshd[8252]: user NOUSER login class [preauth] May 30 03:27:21 angussyd sshd[8252]: Received disconnect from 106.51.130.196 port 35730:11: Normal Shutdown, Thank you for playing [preauth] May 30 03:27:21 angussyd sshd[8252]: Disconnected from invalid user zimbra 106.51.130.196 port 35730 [preauth] May 30 03:27:21 angussyd sshguard[92312]: Attack from "106.51.130.196" on service 100 with danger 10. May 30 03:49:35 angussyd sshd[8917]: Invalid user ubuntu from 172.220.111.40 port 34532 May 30 03:49:35 angussyd sshguard[92312]: Attack from "172.220.111.40" on service 100 with danger 10. May 30 03:49:35 angussyd sshd[8917]: user NOUSER login class [preauth] May 30 03:49:35 angussyd sshd[8917]: Received disconnect from 172.220.111.40 port 34532:11: Normal Shutdown, Thank you for playing [preauth] May 30 03:49:35 angussyd sshd[8917]: Disconnected from invalid user ubuntu 172.220.111.40 port 34532 [preauth] May 30 03:49:35 angussyd sshguard[92312]: Attack from "172.220.111.40" on service 100 with danger 10. May 30 03:52:42 angussyd sshd[8956]: Did not receive identification string from 101.99.22.227 port 53868 May 30 03:52:42 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 03:52:55 angussyd sshd[9190]: Unable to negotiate with 101.99.22.227 port 60380: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 03:52:55 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 03:52:55 angussyd sshd[9257]: Unable to negotiate with 101.99.22.227 port 34194: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 03:52:55 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 03:52:55 angussyd sshguard[92312]: Blocking "101.99.22.227/32" for 120 secs (3 attacks in 13 secs, after 1 abuses over 13 secs.) May 30 04:00:22 angussyd sshd[10324]: Connection closed by 139.162.122.110 port 60190 [preauth] May 30 04:00:22 angussyd sshguard[92312]: Attack from "139.162.122.110" on service 100 with danger 2. May 30 04:00:23 angussyd sshd[10431]: Invalid user from 139.162.122.110 port 60454 May 30 04:00:23 angussyd sshd[10431]: user NOUSER login class [preauth] May 30 04:00:23 angussyd sshd[10431]: Connection closed by invalid user 139.162.122.110 port 60454 [preauth] May 30 04:08:30 angussyd sshd[11406]: Unable to negotiate with 101.99.22.227 port 38542: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:08:30 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:08:47 angussyd sshd[11644]: Unable to negotiate with 101.99.22.227 port 40900: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:08:47 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:08:56 angussyd sshd[12126]: Unable to negotiate with 101.99.22.227 port 42926: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:08:56 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:08:56 angussyd sshguard[92312]: Blocking "101.99.22.227/32" for 240 secs (3 attacks in 26 secs, after 2 abuses over 974 secs.) May 30 04:08:58 angussyd sshd[12031]: Invalid user test6 from 159.203.77.51 port 58732 May 30 04:08:58 angussyd sshguard[92312]: Attack from "159.203.77.51" on service 100 with danger 10. May 30 04:08:58 angussyd sshd[12031]: user NOUSER login class [preauth] May 30 04:08:58 angussyd sshd[12031]: Received disconnect from 159.203.77.51 port 58732:11: Normal Shutdown, Thank you for playing [preauth] May 30 04:08:58 angussyd sshd[12031]: Disconnected from invalid user test6 159.203.77.51 port 58732 [preauth] May 30 04:08:58 angussyd sshguard[92312]: Attack from "159.203.77.51" on service 100 with danger 10. May 30 04:12:24 angussyd sshd[12761]: Invalid user zabbix from 128.199.182.235 port 33950 May 30 04:12:24 angussyd sshguard[92312]: Attack from "128.199.182.235" on service 100 with danger 10. May 30 04:12:24 angussyd sshd[12761]: user NOUSER login class [preauth] May 30 04:12:24 angussyd sshd[12761]: Received disconnect from 128.199.182.235 port 33950:11: Normal Shutdown, Thank you for playing [preauth] May 30 04:12:24 angussyd sshd[12761]: Disconnected from invalid user zabbix 128.199.182.235 port 33950 [preauth] May 30 04:12:24 angussyd sshguard[92312]: Attack from "128.199.182.235" on service 100 with danger 10. May 30 04:19:41 angussyd sshd[13272]: Invalid user oracle from 178.62.57.246 port 43684 May 30 04:19:41 angussyd sshguard[92312]: Attack from "178.62.57.246" on service 100 with danger 10. May 30 04:19:41 angussyd sshd[13272]: user NOUSER login class [preauth] May 30 04:19:41 angussyd sshd[13272]: Received disconnect from 178.62.57.246 port 43684:11: Normal Shutdown, Thank you for playing [preauth] May 30 04:19:41 angussyd sshd[13272]: Disconnected from invalid user oracle 178.62.57.246 port 43684 [preauth] May 30 04:19:41 angussyd sshguard[92312]: Attack from "178.62.57.246" on service 100 with danger 10. May 30 04:21:19 angussyd sshd[13525]: Connection closed by 202.51.74.189 port 36058 [preauth] May 30 04:21:19 angussyd sshguard[92312]: Attack from "202.51.74.189" on service 100 with danger 2. May 30 04:24:32 angussyd sshd[13866]: Unable to negotiate with 101.99.22.227 port 47544: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:24:32 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:24:48 angussyd sshd[14226]: Unable to negotiate with 101.99.22.227 port 49674: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:24:48 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:24:57 angussyd sshd[14385]: Unable to negotiate with 101.99.22.227 port 51818: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:24:57 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:24:57 angussyd sshguard[92312]: Blocking "101.99.22.227/32" for 480 secs (3 attacks in 25 secs, after 3 abuses over 1935 secs.) May 30 04:40:37 angussyd sshd[15735]: Unable to negotiate with 101.99.22.227 port 58744: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:40:37 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:40:54 angussyd sshd[15998]: Unable to negotiate with 101.99.22.227 port 60862: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:40:54 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:41:04 angussyd sshd[16452]: Unable to negotiate with 101.99.22.227 port 34702: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:41:04 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:41:04 angussyd sshguard[92312]: Blocking "101.99.22.227/32" for 960 secs (3 attacks in 27 secs, after 4 abuses over 2902 secs.) May 30 04:41:30 angussyd sshd[17044]: Did not receive identification string from 167.99.38.73 port 54916 May 30 04:41:30 angussyd sshguard[92312]: Attack from "167.99.38.73" on service 100 with danger 10. May 30 04:54:20 angussyd sshd[17374]: Unable to negotiate with 180.126.197.244 port 36261: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth] May 30 04:54:20 angussyd sshguard[92312]: Attack from "180.126.197.244" on service 100 with danger 10. May 30 04:57:12 angussyd sshd[18056]: Unable to negotiate with 101.99.22.227 port 39874: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:57:12 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:57:19 angussyd sshd[18092]: Unable to negotiate with 101.99.22.227 port 41934: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:57:19 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:57:25 angussyd sshd[18576]: Unable to negotiate with 101.99.22.227 port 43986: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 04:57:25 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 04:57:25 angussyd sshguard[92312]: Blocking "101.99.22.227/32" for 1920 secs (3 attacks in 13 secs, after 5 abuses over 3883 secs.) May 30 04:58:30 angussyd sshd[19065]: Invalid user ftpuser from 36.66.156.125 port 35364 May 30 04:58:30 angussyd sshguard[92312]: Attack from "36.66.156.125" on service 100 with danger 10. May 30 04:58:30 angussyd sshd[19065]: user NOUSER login class [preauth] May 30 04:58:30 angussyd sshd[19065]: Received disconnect from 36.66.156.125 port 35364:11: Normal Shutdown, Thank you for playing [preauth] May 30 04:58:30 angussyd sshd[19065]: Disconnected from invalid user ftpuser 36.66.156.125 port 35364 [preauth] May 30 04:58:30 angussyd sshguard[92312]: Attack from "36.66.156.125" on service 100 with danger 10. May 30 05:30:02 angussyd sshd[20244]: Unable to negotiate with 101.99.22.227 port 60486: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 05:30:02 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 05:30:03 angussyd sshd[20680]: Unable to negotiate with 101.99.22.227 port 58222: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 05:30:03 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 05:30:08 angussyd sshd[21175]: Unable to negotiate with 101.99.22.227 port 34264: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 05:30:08 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 05:30:08 angussyd sshguard[92312]: Blocking "101.99.22.227/32" for 3840 secs (3 attacks in 6 secs, after 6 abuses over 5846 secs.) May 30 05:44:56 angussyd sshd[21859]: Received disconnect from 134.209.40.230 port 51332:11: Bye Bye [preauth] May 30 05:44:56 angussyd sshd[21859]: Disconnected from 134.209.40.230 port 51332 [preauth] May 30 05:44:56 angussyd sshguard[92312]: Attack from "134.209.40.230" on service 100 with danger 10. May 30 05:47:01 angussyd sshd[22246]: user admin login class [preauth] May 30 05:47:04 angussyd sshd[22246]: Disconnecting authenticating user admin 193.32.163.81 port 1175: Change of username or service not allowed: (admin,ssh-connection) -> (user,ssh-connection) [preauth] May 30 06:00:49 angussyd sshd[22868]: user root login class [preauth] May 30 06:00:49 angussyd sshd[22868]: Received disconnect from 172.220.111.40 port 42186:11: Normal Shutdown, Thank you for playing [preauth] May 30 06:00:49 angussyd sshd[22868]: Disconnected from authenticating user root 172.220.111.40 port 42186 [preauth] May 30 06:00:49 angussyd sshguard[92312]: Attack from "172.220.111.40" on service 100 with danger 10. May 30 06:17:07 angussyd sshd[23088]: Invalid user administrateur from 159.65.236.58 port 58152 May 30 06:17:07 angussyd sshguard[92312]: Attack from "159.65.236.58" on service 100 with danger 10. May 30 06:17:07 angussyd sshd[23088]: user NOUSER login class [preauth] May 30 06:17:07 angussyd sshd[23088]: Received disconnect from 159.65.236.58 port 58152:11: Normal Shutdown, Thank you for playing [preauth] May 30 06:17:07 angussyd sshd[23088]: Disconnected from invalid user administrateur 159.65.236.58 port 58152 [preauth] May 30 06:17:07 angussyd sshguard[92312]: Attack from "159.65.236.58" on service 100 with danger 10. May 30 06:17:22 angussyd sshd[23527]: user admin login class [preauth] May 30 06:17:22 angussyd sshd[23527]: Received disconnect from 167.99.46.145 port 50568:11: Normal Shutdown, Thank you for playing [preauth] May 30 06:17:22 angussyd sshd[23527]: Disconnected from authenticating user admin 167.99.46.145 port 50568 [preauth] May 30 06:17:22 angussyd sshguard[92312]: Attack from "167.99.46.145" on service 100 with danger 10. May 30 06:18:07 angussyd sshd[23965]: Invalid user suporte from 68.183.161.60 port 48930 May 30 06:18:07 angussyd sshguard[92312]: Attack from "68.183.161.60" on service 100 with danger 10. May 30 06:18:07 angussyd sshd[23965]: user NOUSER login class [preauth] May 30 06:18:07 angussyd sshd[23965]: Received disconnect from 68.183.161.60 port 48930:11: Normal Shutdown, Thank you for playing [preauth] May 30 06:18:07 angussyd sshd[23965]: Disconnected from invalid user suporte 68.183.161.60 port 48930 [preauth] May 30 06:18:07 angussyd sshguard[92312]: Attack from "68.183.161.60" on service 100 with danger 10. May 30 06:34:44 angussyd sshd[24682]: Unable to negotiate with 101.99.22.227 port 46790: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 06:34:44 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 06:34:44 angussyd sshd[24780]: Unable to negotiate with 101.99.22.227 port 44772: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 06:34:44 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 06:34:51 angussyd sshd[25454]: Unable to negotiate with 101.99.22.227 port 48836: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 06:34:51 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 06:34:51 angussyd sshguard[92312]: Blocking "101.99.22.227/32" for 7680 secs (3 attacks in 7 secs, after 7 abuses over 9729 secs.) May 30 06:51:45 angussyd sshd[26093]: user root login class [preauth] May 30 06:51:45 angussyd sshd[26093]: Received disconnect from 85.195.124.26 port 59408:11: Normal Shutdown, Thank you for playing [preauth] May 30 06:51:45 angussyd sshd[26093]: Disconnected from authenticating user root 85.195.124.26 port 59408 [preauth] May 30 06:51:45 angussyd sshguard[92312]: Attack from "85.195.124.26" on service 100 with danger 10. May 30 07:04:40 angussyd sshd[26779]: Did not receive identification string from 199.116.138.170 port 52285 May 30 07:04:40 angussyd sshguard[92312]: Attack from "199.116.138.170" on service 100 with danger 10. May 30 07:26:07 angussyd sshd[26839]: user www login class [preauth] May 30 07:26:07 angussyd sshd[26839]: Received disconnect from 46.101.88.10 port 41752:11: Normal Shutdown, Thank you for playing [preauth] May 30 07:26:07 angussyd sshd[26839]: Disconnected from authenticating user www 46.101.88.10 port 41752 [preauth] May 30 07:26:07 angussyd sshguard[92312]: Attack from "46.101.88.10" on service 100 with danger 10. May 30 07:26:25 angussyd sshd[27065]: user root login class [preauth] May 30 07:26:25 angussyd sshd[27065]: Received disconnect from 106.51.130.196 port 50716:11: Normal Shutdown, Thank you for playing [preauth] May 30 07:26:25 angussyd sshd[27065]: Disconnected from authenticating user root 106.51.130.196 port 50716 [preauth] May 30 07:26:25 angussyd sshguard[92312]: Attack from "106.51.130.196" on service 100 with danger 10. May 30 07:30:09 angussyd sshd[27524]: Connection closed by 149.56.44.101 port 53788 [preauth] May 30 07:30:09 angussyd sshguard[92312]: Attack from "149.56.44.101" on service 100 with danger 2. May 30 07:47:22 angussyd sshd[27891]: Unable to negotiate with 169.0.221.131 port 45130: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth] May 30 07:47:22 angussyd sshguard[92312]: Attack from "169.0.221.131" on service 100 with danger 10. May 30 07:51:12 angussyd sshd[28147]: user root login class [preauth] May 30 07:51:12 angussyd sshd[28147]: Received disconnect from 138.197.180.16 port 48310:11: Normal Shutdown, Thank you for playing [preauth] May 30 07:51:12 angussyd sshd[28147]: Disconnected from authenticating user root 138.197.180.16 port 48310 [preauth] May 30 07:51:12 angussyd sshguard[92312]: Attack from "138.197.180.16" on service 100 with danger 10. May 30 07:52:29 angussyd sshd[28618]: Did not receive identification string from 105.199.58.223 port 52878 May 30 07:52:29 angussyd sshguard[92312]: Attack from "105.199.58.223" on service 100 with danger 10. May 30 07:58:58 angussyd sshd[28954]: Invalid user ubnt from 138.197.204.165 port 47256 May 30 07:58:58 angussyd sshguard[92312]: Attack from "138.197.204.165" on service 100 with danger 10. May 30 07:58:58 angussyd sshd[28954]: user NOUSER login class [preauth] May 30 07:58:58 angussyd sshd[28954]: Received disconnect from 138.197.204.165 port 47256:11: Normal Shutdown, Thank you for playing [preauth] May 30 07:58:58 angussyd sshd[28954]: Disconnected from invalid user ubnt 138.197.204.165 port 47256 [preauth] May 30 07:58:58 angussyd sshguard[92312]: Attack from "138.197.204.165" on service 100 with danger 10. May 30 07:59:08 angussyd sshd[29176]: Invalid user ubuntu from 85.195.212.6 port 46240 May 30 07:59:08 angussyd sshguard[92312]: Attack from "85.195.212.6" on service 100 with danger 10. May 30 07:59:08 angussyd sshd[29176]: user NOUSER login class [preauth] May 30 07:59:08 angussyd sshd[29176]: Received disconnect from 85.195.212.6 port 46240:11: Normal Shutdown, Thank you for playing [preauth] May 30 07:59:08 angussyd sshd[29176]: Disconnected from invalid user ubuntu 85.195.212.6 port 46240 [preauth] May 30 07:59:08 angussyd sshguard[92312]: Attack from "85.195.212.6" on service 100 with danger 10. May 30 08:07:21 angussyd sshd[29728]: Connection closed by 204.48.31.143 port 36080 [preauth] May 30 08:07:21 angussyd sshguard[92312]: Attack from "204.48.31.143" on service 100 with danger 2. May 30 08:09:33 angussyd sshd[29835]: user root login class [preauth] May 30 08:09:33 angussyd sshd[29835]: Received disconnect from 173.239.37.139 port 55240:11: Normal Shutdown, Thank you for playing [preauth] May 30 08:09:33 angussyd sshd[29835]: Disconnected from authenticating user root 173.239.37.139 port 55240 [preauth] May 30 08:09:33 angussyd sshguard[92312]: Attack from "173.239.37.139" on service 100 with danger 10. May 30 08:27:21 angussyd sshd[30144]: user root login class [preauth] May 30 08:27:21 angussyd sshd[30144]: Received disconnect from 178.128.195.6 port 36404:11: Normal Shutdown, Thank you for playing [preauth] May 30 08:27:21 angussyd sshd[30144]: Disconnected from authenticating user root 178.128.195.6 port 36404 [preauth] May 30 08:27:21 angussyd sshguard[92312]: Attack from "178.128.195.6" on service 100 with danger 10. May 30 08:43:40 angussyd sshd[30996]: Unable to negotiate with 101.99.22.227 port 35544: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 08:43:40 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 08:43:48 angussyd sshd[31451]: Unable to negotiate with 101.99.22.227 port 37838: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 08:43:48 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 08:43:57 angussyd sshd[32010]: Unable to negotiate with 101.99.22.227 port 39882: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 08:43:57 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 08:43:57 angussyd sshguard[92312]: Blocking "101.99.22.227/32" for 15360 secs (3 attacks in 17 secs, after 8 abuses over 17475 secs.) May 30 08:48:50 angussyd sshd[32655]: Connection closed by 194.126.12.181 port 53740 [preauth] May 30 08:48:50 angussyd sshguard[92312]: Attack from "194.126.12.181" on service 100 with danger 2. May 30 09:02:23 angussyd sshd[33180]: Unable to negotiate with 94.112.202.4 port 49162: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth] May 30 09:02:23 angussyd sshguard[92312]: Attack from "94.112.202.4" on service 100 with danger 10. May 30 09:02:26 angussyd sshd[33248]: Unable to negotiate with 94.112.202.4 port 49176: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth] May 30 09:02:26 angussyd sshguard[92312]: Attack from "94.112.202.4" on service 100 with danger 10. May 30 09:02:33 angussyd sshd[33478]: Unable to negotiate with 94.112.202.4 port 49183: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth] May 30 09:02:33 angussyd sshguard[92312]: Attack from "94.112.202.4" on service 100 with danger 10. May 30 09:02:33 angussyd sshguard[92312]: Blocking "94.112.202.4/32" for 120 secs (3 attacks in 10 secs, after 1 abuses over 10 secs.) May 30 09:08:39 angussyd sshd[34328]: user root login class [preauth] May 30 09:08:39 angussyd sshd[34328]: Received disconnect from 159.65.149.131 port 52139:11: Normal Shutdown, Thank you for playing [preauth] May 30 09:08:39 angussyd sshd[34328]: Disconnected from authenticating user root 159.65.149.131 port 52139 [preauth] May 30 09:08:39 angussyd sshguard[92312]: Attack from "159.65.149.131" on service 100 with danger 10. May 30 09:19:36 angussyd sshd[34777]: Unable to negotiate with 42.61.24.202 port 35792: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth] May 30 09:19:36 angussyd sshguard[92312]: Attack from "42.61.24.202" on service 100 with danger 10. May 30 09:34:39 angussyd sshd[35170]: Invalid user jboss from 159.65.242.16 port 41774 May 30 09:34:39 angussyd sshguard[92312]: Attack from "159.65.242.16" on service 100 with danger 10. May 30 09:34:39 angussyd sshd[35170]: user NOUSER login class [preauth] May 30 09:34:39 angussyd sshd[35170]: Received disconnect from 159.65.242.16 port 41774:11: Normal Shutdown, Thank you for playing [preauth] May 30 09:34:39 angussyd sshd[35170]: Disconnected from invalid user jboss 159.65.242.16 port 41774 [preauth] May 30 09:34:39 angussyd sshguard[92312]: Attack from "159.65.242.16" on service 100 with danger 10. May 30 09:38:24 angussyd sshd[35374]: Invalid user hadoop from 45.55.12.248 port 35936 May 30 09:38:24 angussyd sshguard[92312]: Attack from "45.55.12.248" on service 100 with danger 10. May 30 09:38:24 angussyd sshd[35374]: user NOUSER login class [preauth] May 30 09:38:24 angussyd sshd[35374]: Received disconnect from 45.55.12.248 port 35936:11: Normal Shutdown, Thank you for playing [preauth] May 30 09:38:24 angussyd sshd[35374]: Disconnected from invalid user hadoop 45.55.12.248 port 35936 [preauth] May 30 09:38:24 angussyd sshguard[92312]: Attack from "45.55.12.248" on service 100 with danger 10. May 30 09:49:28 angussyd sshd[35660]: Connection closed by 52.23.201.117 port 54292 [preauth] May 30 09:49:28 angussyd sshguard[92312]: Attack from "52.23.201.117" on service 100 with danger 2. May 30 09:51:58 angussyd sshd[36058]: Invalid user usuario from 159.89.164.167 port 49766 May 30 09:51:58 angussyd sshguard[92312]: Attack from "159.89.164.167" on service 100 with danger 10. May 30 09:51:58 angussyd sshd[36058]: user NOUSER login class [preauth] May 30 09:51:58 angussyd sshd[36058]: Received disconnect from 159.89.164.167 port 49766:11: Normal Shutdown, Thank you for playing [preauth] May 30 09:51:58 angussyd sshd[36058]: Disconnected from invalid user usuario 159.89.164.167 port 49766 [preauth] May 30 09:51:58 angussyd sshguard[92312]: Attack from "159.89.164.167" on service 100 with danger 10. May 30 09:53:03 angussyd sshd[36529]: Invalid user zabbix from 128.199.133.249 port 42134 May 30 09:53:03 angussyd sshguard[92312]: Attack from "128.199.133.249" on service 100 with danger 10. May 30 09:53:03 angussyd sshd[36529]: user NOUSER login class [preauth] May 30 09:53:03 angussyd sshd[36529]: Received disconnect from 128.199.133.249 port 42134:11: Normal Shutdown, Thank you for playing [preauth] May 30 09:53:03 angussyd sshd[36529]: Disconnected from invalid user zabbix 128.199.133.249 port 42134 [preauth] May 30 09:53:03 angussyd sshguard[92312]: Attack from "128.199.133.249" on service 100 with danger 10. May 30 10:22:39 angussyd sshd[36990]: Invalid user sybase from 159.89.164.167 port 41288 May 30 10:22:39 angussyd sshguard[92312]: Attack from "159.89.164.167" on service 100 with danger 10. May 30 10:22:39 angussyd sshd[36990]: user NOUSER login class [preauth] May 30 10:22:39 angussyd sshd[36990]: Received disconnect from 159.89.164.167 port 41288:11: Normal Shutdown, Thank you for playing [preauth] May 30 10:22:39 angussyd sshd[36990]: Disconnected from invalid user sybase 159.89.164.167 port 41288 [preauth] May 30 10:22:39 angussyd sshguard[92312]: Attack from "159.89.164.167" on service 100 with danger 10. May 30 10:41:05 angussyd sshd[37239]: user admin login class [preauth] May 30 10:41:05 angussyd sshd[37239]: Received disconnect from 85.195.212.6 port 33068:11: Normal Shutdown, Thank you for playing [preauth] May 30 10:41:05 angussyd sshd[37239]: Disconnected from authenticating user admin 85.195.212.6 port 33068 [preauth] May 30 10:41:05 angussyd sshguard[92312]: Attack from "85.195.212.6" on service 100 with danger 10. May 30 10:44:38 angussyd sshd[37532]: Invalid user xy from 78.206.153.68 port 59342 May 30 10:44:38 angussyd sshguard[92312]: Attack from "78.206.153.68" on service 100 with danger 10. May 30 10:44:38 angussyd sshd[37532]: user NOUSER login class [preauth] May 30 10:44:39 angussyd sshd[37532]: Received disconnect from 78.206.153.68 port 59342:11: Bye Bye [preauth] May 30 10:44:39 angussyd sshd[37532]: Disconnected from invalid user xy 78.206.153.68 port 59342 [preauth] May 30 10:44:39 angussyd sshguard[92312]: Attack from "78.206.153.68" on service 100 with danger 10. May 30 10:48:25 angussyd sshd[37816]: Invalid user zimbra from 165.227.49.242 port 51900 May 30 10:48:25 angussyd sshguard[92312]: Attack from "165.227.49.242" on service 100 with danger 10. May 30 10:48:25 angussyd sshd[37816]: user NOUSER login class [preauth] May 30 10:48:26 angussyd sshd[37816]: Received disconnect from 165.227.49.242 port 51900:11: Normal Shutdown, Thank you for playing [preauth] May 30 10:48:26 angussyd sshd[37816]: Disconnected from invalid user zimbra 165.227.49.242 port 51900 [preauth] May 30 10:48:26 angussyd sshguard[92312]: Attack from "165.227.49.242" on service 100 with danger 10. May 30 11:00:49 angussyd sshd[38453]: user root login class [preauth] May 30 11:00:49 angussyd sshd[38453]: user root login class [preauth] May 30 11:00:49 angussyd sshd[38453]: user root login class [preauth] May 30 11:00:49 angussyd sshd[38453]: Accepted publickey for root from 74.125.56.110 port 43643 ssh2: RSA SHA256:64rtLAhN8dC/6fonvpIidF/HjsZgWThxA845wCR64Hs May 30 11:00:57 angussyd sshd[38453]: Received disconnect from 74.125.56.110 port 43643:11: disconnected by user May 30 11:00:57 angussyd sshd[38453]: Disconnected from user root 74.125.56.110 port 43643 May 30 11:10:01 angussyd sshd[43122]: Invalid user jboss from 104.236.246.16 port 42426 May 30 11:10:01 angussyd sshguard[92312]: Attack from "104.236.246.16" on service 100 with danger 10. May 30 11:10:01 angussyd sshd[43122]: user NOUSER login class [preauth] May 30 11:10:01 angussyd sshd[43122]: Received disconnect from 104.236.246.16 port 42426:11: Normal Shutdown, Thank you for playing [preauth] May 30 11:10:01 angussyd sshd[43122]: Disconnected from invalid user jboss 104.236.246.16 port 42426 [preauth] May 30 11:10:01 angussyd sshguard[92312]: Attack from "104.236.246.16" on service 100 with danger 10. May 30 11:19:43 angussyd sshd[43347]: Invalid user phion from 37.59.104.76 port 39066 May 30 11:19:43 angussyd sshguard[92312]: Attack from "37.59.104.76" on service 100 with danger 10. May 30 11:19:43 angussyd sshd[43347]: user NOUSER login class [preauth] May 30 11:19:43 angussyd sshd[43347]: Received disconnect from 37.59.104.76 port 39066:11: Normal Shutdown, Thank you for playing [preauth] May 30 11:19:43 angussyd sshd[43347]: Disconnected from invalid user phion 37.59.104.76 port 39066 [preauth] May 30 11:19:43 angussyd sshguard[92312]: Attack from "37.59.104.76" on service 100 with danger 10. May 30 11:28:07 angussyd sshd[43641]: Invalid user ftp from 159.65.136.194 port 42076 May 30 11:28:07 angussyd sshguard[92312]: Attack from "159.65.136.194" on service 100 with danger 10. May 30 11:28:07 angussyd sshd[43641]: user NOUSER login class [preauth] May 30 11:28:07 angussyd sshd[43641]: Received disconnect from 159.65.136.194 port 42076:11: Normal Shutdown, Thank you for playing [preauth] May 30 11:28:07 angussyd sshd[43641]: Disconnected from invalid user ftp 159.65.136.194 port 42076 [preauth] May 30 11:28:07 angussyd sshguard[92312]: Attack from "159.65.136.194" on service 100 with danger 10. May 30 11:33:11 angussyd sshd[44024]: user root login class [preauth] May 30 11:33:12 angussyd sshd[44024]: Received disconnect from 178.62.241.231 port 49730:11: Normal Shutdown, Thank you for playing [preauth] May 30 11:33:12 angussyd sshd[44024]: Disconnected from authenticating user root 178.62.241.231 port 49730 [preauth] May 30 11:33:12 angussyd sshguard[92312]: Attack from "178.62.241.231" on service 100 with danger 10. May 30 11:36:13 angussyd sshd[44095]: Invalid user office from 222.112.250.9 port 55602 May 30 11:36:13 angussyd sshguard[92312]: Attack from "222.112.250.9" on service 100 with danger 10. May 30 11:36:13 angussyd sshd[44095]: user NOUSER login class [preauth] May 30 11:36:13 angussyd sshd[44095]: Received disconnect from 222.112.250.9 port 55602:11: Bye Bye [preauth] May 30 11:36:13 angussyd sshd[44095]: Disconnected from invalid user office 222.112.250.9 port 55602 [preauth] May 30 11:36:13 angussyd sshguard[92312]: Attack from "222.112.250.9" on service 100 with danger 10. May 30 11:43:36 angussyd sshd[44321]: Invalid user jboss from 110.45.145.178 port 33218 May 30 11:43:36 angussyd sshguard[92312]: Attack from "110.45.145.178" on service 100 with danger 10. May 30 11:43:36 angussyd sshd[44321]: user NOUSER login class [preauth] May 30 11:43:36 angussyd sshd[44321]: Received disconnect from 110.45.145.178 port 33218:11: Normal Shutdown, Thank you for playing [preauth] May 30 11:43:36 angussyd sshd[44321]: Disconnected from invalid user jboss 110.45.145.178 port 33218 [preauth] May 30 11:43:36 angussyd sshguard[92312]: Attack from "110.45.145.178" on service 100 with danger 10. May 30 11:48:17 angussyd sshd[44516]: Invalid user michael from 104.248.88.33 port 46598 May 30 11:48:17 angussyd sshguard[92312]: Attack from "104.248.88.33" on service 100 with danger 10. May 30 11:48:17 angussyd sshd[44516]: user NOUSER login class [preauth] May 30 11:48:17 angussyd sshd[44516]: Received disconnect from 104.248.88.33 port 46598:11: Normal Shutdown, Thank you for playing [preauth] May 30 11:48:17 angussyd sshd[44516]: Disconnected from invalid user michael 104.248.88.33 port 46598 [preauth] May 30 11:48:17 angussyd sshguard[92312]: Attack from "104.248.88.33" on service 100 with danger 10. May 30 11:53:52 angussyd sshd[44744]: Connection closed by 181.111.181.50 port 53028 [preauth] May 30 11:53:52 angussyd sshguard[92312]: Attack from "181.111.181.50" on service 100 with danger 2. May 30 11:54:24 angussyd sshd[45049]: Connection closed by 192.144.206.207 port 33258 [preauth] May 30 11:54:24 angussyd sshguard[92312]: Attack from "192.144.206.207" on service 100 with danger 2. May 30 12:05:45 angussyd sshd[46035]: Invalid user test from 217.19.29.91 port 39960 May 30 12:05:45 angussyd sshguard[92312]: Attack from "217.19.29.91" on service 100 with danger 10. May 30 12:05:45 angussyd sshd[46035]: user NOUSER login class [preauth] May 30 12:05:45 angussyd sshd[46035]: Received disconnect from 217.19.29.91 port 39960:11: Bye Bye [preauth] May 30 12:05:45 angussyd sshd[46035]: Disconnected from invalid user test 217.19.29.91 port 39960 [preauth] May 30 12:05:45 angussyd sshguard[92312]: Attack from "217.19.29.91" on service 100 with danger 10. May 30 12:06:30 angussyd sshd[46553]: Connection closed by 179.90.202.28 port 35674 [preauth] May 30 12:06:30 angussyd sshguard[92312]: Attack from "179.90.202.28" on service 100 with danger 2. May 30 12:11:33 angussyd sshd[46649]: Received disconnect from 165.22.1.137 port 34332:11: Bye Bye [preauth] May 30 12:11:33 angussyd sshd[46649]: Disconnected from 165.22.1.137 port 34332 [preauth] May 30 12:11:33 angussyd sshguard[92312]: Attack from "165.22.1.137" on service 100 with danger 10. May 30 12:29:02 angussyd sshd[46994]: Connection closed by 51.75.23.242 port 43946 [preauth] May 30 12:29:02 angussyd sshguard[92312]: Attack from "51.75.23.242" on service 100 with danger 2. May 30 12:38:06 angussyd sshd[47534]: Connection closed by 139.162.122.110 port 46000 [preauth] May 30 12:38:06 angussyd sshguard[92312]: Attack from "139.162.122.110" on service 100 with danger 2. May 30 12:38:07 angussyd sshd[47965]: Invalid user from 139.162.122.110 port 46274 May 30 12:38:07 angussyd sshd[47965]: user NOUSER login class [preauth] May 30 12:38:07 angussyd sshd[47965]: Connection closed by invalid user 139.162.122.110 port 46274 [preauth] May 30 12:41:18 angussyd sshd[48190]: Invalid user user from 206.189.166.172 port 52558 May 30 12:41:18 angussyd sshguard[92312]: Attack from "206.189.166.172" on service 100 with danger 10. May 30 12:41:18 angussyd sshd[48190]: user NOUSER login class [preauth] May 30 12:41:18 angussyd sshd[48190]: Received disconnect from 206.189.166.172 port 52558:11: Normal Shutdown, Thank you for playing [preauth] May 30 12:41:18 angussyd sshd[48190]: Disconnected from invalid user user 206.189.166.172 port 52558 [preauth] May 30 12:41:18 angussyd sshguard[92312]: Attack from "206.189.166.172" on service 100 with danger 10. May 30 12:51:42 angussyd sshd[48568]: user admin login class [preauth] May 30 12:51:42 angussyd sshd[48568]: Disconnecting authenticating user admin 185.232.67.11 port 56953: Change of username or service not allowed: (admin,ssh-connection) -> (user,ssh-connection) [preauth] May 30 13:00:12 angussyd sshd[49413]: Unable to negotiate with 101.99.22.227 port 52322: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 13:00:12 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 13:00:21 angussyd sshd[49639]: Unable to negotiate with 101.99.22.227 port 54498: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 13:00:21 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 13:00:36 angussyd sshd[49830]: Unable to negotiate with 101.99.22.227 port 56568: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 13:00:36 angussyd sshguard[92312]: Attack from "101.99.22.227" on service 100 with danger 10. May 30 13:00:36 angussyd sshguard[92312]: Blocking "101.99.22.227/32" for 30720 secs (3 attacks in 24 secs, after 9 abuses over 32874 secs.) May 30 13:05:32 angussyd sshd[50340]: user admin login class [preauth] May 30 13:05:32 angussyd sshd[50340]: Received disconnect from 219.228.123.42 port 58978:11: Normal Shutdown, Thank you for playing [preauth] May 30 13:05:32 angussyd sshd[50340]: Disconnected from authenticating user admin 219.228.123.42 port 58978 [preauth] May 30 13:05:32 angussyd sshguard[92312]: Attack from "219.228.123.42" on service 100 with danger 10. May 30 13:14:42 angussyd sshd[50720]: user admin login class [preauth] May 30 13:14:43 angussyd sshd[50720]: Connection closed by authenticating user admin 103.105.179.19 port 44227 [preauth] May 30 13:21:41 angussyd sshd[51087]: Unable to negotiate with 114.241.80.135 port 3914: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth] May 30 13:21:41 angussyd sshguard[92312]: Attack from "114.241.80.135" on service 100 with danger 10. May 30 13:26:07 angussyd sshd[51445]: Invalid user zabbix from 222.239.78.88 port 57055 May 30 13:26:07 angussyd sshguard[92312]: Attack from "222.239.78.88" on service 100 with danger 10. May 30 13:26:07 angussyd sshd[51445]: user NOUSER login class [preauth] May 30 13:26:07 angussyd sshd[51445]: Received disconnect from 222.239.78.88 port 57055:11: Normal Shutdown, Thank you for playing [preauth] May 30 13:26:07 angussyd sshd[51445]: Disconnected from invalid user zabbix 222.239.78.88 port 57055 [preauth] May 30 13:26:07 angussyd sshguard[92312]: Attack from "222.239.78.88" on service 100 with danger 10. May 30 13:30:21 angussyd sshd[51678]: Invalid user ftpuser from 142.93.6.47 port 37744 May 30 13:30:21 angussyd sshguard[92312]: Attack from "142.93.6.47" on service 100 with danger 10. May 30 13:30:21 angussyd sshd[51678]: user NOUSER login class [preauth] May 30 13:30:21 angussyd sshd[51678]: Received disconnect from 142.93.6.47 port 37744:11: Normal Shutdown, Thank you for playing [preauth] May 30 13:30:21 angussyd sshd[51678]: Disconnected from invalid user ftpuser 142.93.6.47 port 37744 [preauth] May 30 13:30:21 angussyd sshguard[92312]: Attack from "142.93.6.47" on service 100 with danger 10. May 30 13:30:45 angussyd sshd[52029]: Connection closed by 91.81.91.61 port 44468 [preauth] May 30 13:30:45 angussyd sshguard[92312]: Attack from "91.81.91.61" on service 100 with danger 2. May 30 13:32:39 angussyd sshd[52369]: Invalid user test from 159.65.245.203 port 57338 May 30 13:32:39 angussyd sshguard[92312]: Attack from "159.65.245.203" on service 100 with danger 10. May 30 13:32:39 angussyd sshd[52369]: user NOUSER login class [preauth] May 30 13:32:40 angussyd sshd[52369]: Received disconnect from 159.65.245.203 port 57338:11: Normal Shutdown, Thank you for playing [preauth] May 30 13:32:40 angussyd sshd[52369]: Disconnected from invalid user test 159.65.245.203 port 57338 [preauth] May 30 13:32:40 angussyd sshguard[92312]: Attack from "159.65.245.203" on service 100 with danger 10. May 30 13:53:53 angussyd sshd[52758]: Invalid user ftp from 35.237.216.116 port 47560 May 30 13:53:53 angussyd sshguard[92312]: Attack from "35.237.216.116" on service 100 with danger 10. May 30 13:53:53 angussyd sshd[52758]: user NOUSER login class [preauth] May 30 13:53:53 angussyd sshd[52758]: Received disconnect from 35.237.216.116 port 47560:11: Normal Shutdown, Thank you for playing [preauth] May 30 13:53:53 angussyd sshd[52758]: Disconnected from invalid user ftp 35.237.216.116 port 47560 [preauth] May 30 13:53:53 angussyd sshguard[92312]: Attack from "35.237.216.116" on service 100 with danger 10. May 30 13:57:12 angussyd sshd[53087]: Invalid user jboss from 178.128.17.76 port 47928 May 30 13:57:12 angussyd sshguard[92312]: Attack from "178.128.17.76" on service 100 with danger 10. May 30 13:57:12 angussyd sshd[53087]: user NOUSER login class [preauth] May 30 13:57:12 angussyd sshd[53087]: Received disconnect from 178.128.17.76 port 47928:11: Normal Shutdown, Thank you for playing [preauth] May 30 13:57:12 angussyd sshd[53087]: Disconnected from invalid user jboss 178.128.17.76 port 47928 [preauth] May 30 13:57:12 angussyd sshguard[92312]: Attack from "178.128.17.76" on service 100 with danger 10. May 30 14:13:44 angussyd sshd[55314]: Invalid user zimbra from 76.27.163.60 port 36082 May 30 14:13:44 angussyd sshguard[92312]: Attack from "76.27.163.60" on service 100 with danger 10. May 30 14:13:44 angussyd sshd[55314]: user NOUSER login class [preauth] May 30 14:13:44 angussyd sshd[55314]: Received disconnect from 76.27.163.60 port 36082:11: Normal Shutdown, Thank you for playing [preauth] May 30 14:13:44 angussyd sshd[55314]: Disconnected from invalid user zimbra 76.27.163.60 port 36082 [preauth] May 30 14:13:44 angussyd sshguard[92312]: Attack from "76.27.163.60" on service 100 with danger 10. May 30 14:15:52 angussyd sshd[55844]: user root login class [preauth] May 30 14:15:53 angussyd sshd[55844]: Received disconnect from 74.63.193.14 port 49634:11: Normal Shutdown, Thank you for playing [preauth] May 30 14:15:53 angussyd sshd[55844]: Disconnected from authenticating user root 74.63.193.14 port 49634 [preauth] May 30 14:15:53 angussyd sshguard[92312]: Attack from "74.63.193.14" on service 100 with danger 10. May 30 14:22:22 angussyd sshd[56186]: Connection closed by 188.166.247.82 port 56356 [preauth] May 30 14:22:22 angussyd sshguard[92312]: Attack from "188.166.247.82" on service 100 with danger 2. May 30 14:40:11 angussyd sshd[56358]: Received disconnect from 178.62.127.90 port 37260:11: Bye Bye [preauth] May 30 14:40:11 angussyd sshd[56358]: Disconnected from 178.62.127.90 port 37260 [preauth] May 30 14:40:11 angussyd sshguard[92312]: Attack from "178.62.127.90" on service 100 with danger 10. May 30 14:53:41 angussyd sshd[57007]: Received disconnect from 159.65.145.206 port 51236:11: Bye Bye [preauth] May 30 14:53:41 angussyd sshd[57007]: Disconnected from 159.65.145.206 port 51236 [preauth] May 30 14:53:41 angussyd sshguard[92312]: Attack from "159.65.145.206" on service 100 with danger 10. May 30 14:56:10 angussyd sshd[57383]: Invalid user ubuntu from 36.66.156.125 port 37072 May 30 14:56:10 angussyd sshguard[92312]: Attack from "36.66.156.125" on service 100 with danger 10. May 30 14:56:10 angussyd sshd[57383]: user NOUSER login class [preauth] May 30 14:56:10 angussyd sshd[57383]: Received disconnect from 36.66.156.125 port 37072:11: Normal Shutdown, Thank you for playing [preauth] May 30 14:56:10 angussyd sshd[57383]: Disconnected from invalid user ubuntu 36.66.156.125 port 37072 [preauth] May 30 14:56:10 angussyd sshguard[92312]: Attack from "36.66.156.125" on service 100 with danger 10. May 30 15:06:53 angussyd sshd[58163]: user www login class [preauth] May 30 15:06:53 angussyd sshd[58163]: Received disconnect from 52.233.133.59 port 47250:11: Normal Shutdown, Thank you for playing [preauth] May 30 15:06:53 angussyd sshd[58163]: Disconnected from authenticating user www 52.233.133.59 port 47250 [preauth] May 30 15:06:53 angussyd sshguard[92312]: Attack from "52.233.133.59" on service 100 with danger 10. May 30 15:30:28 angussyd sshd[58436]: Invalid user pn from 177.229.195.104 port 45466 May 30 15:30:28 angussyd sshguard[92312]: Attack from "177.229.195.104" on service 100 with danger 10. May 30 15:30:28 angussyd sshd[58436]: user NOUSER login class [preauth] May 30 15:30:28 angussyd sshd[58436]: Received disconnect from 177.229.195.104 port 45466:11: Bye Bye [preauth] May 30 15:30:28 angussyd sshd[58436]: Disconnected from invalid user pn 177.229.195.104 port 45466 [preauth] May 30 15:30:28 angussyd sshguard[92312]: Attack from "177.229.195.104" on service 100 with danger 10. May 30 15:41:12 angussyd sshd[58753]: Invalid user tomcat from 68.183.150.54 port 56854 May 30 15:41:12 angussyd sshguard[92312]: Attack from "68.183.150.54" on service 100 with danger 10. May 30 15:41:12 angussyd sshd[58753]: user NOUSER login class [preauth] May 30 15:41:12 angussyd sshd[58753]: Received disconnect from 68.183.150.54 port 56854:11: Normal Shutdown, Thank you for playing [preauth] May 30 15:41:12 angussyd sshd[58753]: Disconnected from invalid user tomcat 68.183.150.54 port 56854 [preauth] May 30 15:41:12 angussyd sshguard[92312]: Attack from "68.183.150.54" on service 100 with danger 10. May 30 15:51:18 angussyd sshd[59060]: Connection closed by 58.59.2.26 port 40000 [preauth] May 30 15:51:18 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 30 15:52:27 angussyd sshd[59413]: user www login class [preauth] May 30 15:52:27 angussyd sshd[59413]: Received disconnect from 165.227.140.123 port 35156:11: Normal Shutdown, Thank you for playing [preauth] May 30 15:52:27 angussyd sshd[59413]: Disconnected from authenticating user www 165.227.140.123 port 35156 [preauth] May 30 15:52:27 angussyd sshguard[92312]: Attack from "165.227.140.123" on service 100 with danger 10. May 30 15:58:50 angussyd sshd[59592]: Received disconnect from 221.13.68.195 port 39524:11: Bye Bye [preauth] May 30 15:58:50 angussyd sshd[59592]: Disconnected from 221.13.68.195 port 39524 [preauth] May 30 15:58:50 angussyd sshguard[92312]: Attack from "221.13.68.195" on service 100 with danger 10. May 30 15:59:25 angussyd sshd[59751]: Connection closed by 58.59.2.26 port 56274 [preauth] May 30 15:59:25 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 30 16:07:34 angussyd sshd[60464]: Connection closed by 58.59.2.26 port 46680 [preauth] May 30 16:07:34 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 30 16:12:42 angussyd sshd[60610]: Did not receive identification string from 174.138.2.157 port 54932 May 30 16:12:42 angussyd sshguard[92312]: Attack from "174.138.2.157" on service 100 with danger 10. May 30 16:16:04 angussyd sshd[60830]: Connection closed by 58.59.2.26 port 49354 [preauth] May 30 16:16:04 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 30 17:01:27 angussyd sshd[61792]: Connection closed by 130.61.121.78 port 46572 [preauth] May 30 17:01:27 angussyd sshguard[92312]: Attack from "130.61.121.78" on service 100 with danger 2. May 30 17:23:23 angussyd sshd[62065]: Invalid user user from 104.248.88.33 port 50586 May 30 17:23:23 angussyd sshguard[92312]: Attack from "104.248.88.33" on service 100 with danger 10. May 30 17:23:23 angussyd sshd[62065]: user NOUSER login class [preauth] May 30 17:23:23 angussyd sshd[62065]: Received disconnect from 104.248.88.33 port 50586:11: Normal Shutdown, Thank you for playing [preauth] May 30 17:23:23 angussyd sshd[62065]: Disconnected from invalid user user 104.248.88.33 port 50586 [preauth] May 30 17:23:23 angussyd sshguard[92312]: Attack from "104.248.88.33" on service 100 with danger 10. May 30 17:24:55 angussyd sshd[62336]: user www login class [preauth] May 30 17:24:55 angussyd sshd[62336]: Received disconnect from 174.101.80.233 port 60496:11: Normal Shutdown, Thank you for playing [preauth] May 30 17:24:55 angussyd sshd[62336]: Disconnected from authenticating user www 174.101.80.233 port 60496 [preauth] May 30 17:24:55 angussyd sshguard[92312]: Attack from "174.101.80.233" on service 100 with danger 10. May 30 17:27:02 angussyd sshd[62623]: Unable to negotiate with 218.92.0.204 port 64051: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 17:27:02 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 30 17:28:11 angussyd sshd[62962]: Unable to negotiate with 218.92.0.204 port 42147: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 17:28:11 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 30 17:29:14 angussyd sshd[63246]: Unable to negotiate with 218.92.0.204 port 36367: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 17:29:14 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 30 17:29:14 angussyd sshguard[92312]: Blocking "218.92.0.204/32" for 15360 secs (3 attacks in 132 secs, after 8 abuses over 73524 secs.) May 30 17:31:26 angussyd sshd[63871]: Invalid user wp-user from 85.195.124.26 port 40674 May 30 17:31:26 angussyd sshguard[92312]: Attack from "85.195.124.26" on service 100 with danger 10. May 30 17:31:26 angussyd sshd[63871]: user NOUSER login class [preauth] May 30 17:31:27 angussyd sshd[63871]: Received disconnect from 85.195.124.26 port 40674:11: Normal Shutdown, Thank you for playing [preauth] May 30 17:31:27 angussyd sshd[63871]: Disconnected from invalid user wp-user 85.195.124.26 port 40674 [preauth] May 30 17:31:27 angussyd sshguard[92312]: Attack from "85.195.124.26" on service 100 with danger 10. May 30 17:33:51 angussyd sshd[64210]: Connection closed by 148.70.77.22 port 46128 [preauth] May 30 17:33:51 angussyd sshguard[92312]: Attack from "148.70.77.22" on service 100 with danger 2. May 30 17:35:30 angussyd sshd[64568]: Connection closed by 89.32.124.241 port 32782 [preauth] May 30 17:35:30 angussyd sshguard[92312]: Attack from "89.32.124.241" on service 100 with danger 2. May 30 17:48:34 angussyd sshd[65138]: Unable to negotiate with 218.92.0.131 port 58731: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 17:48:34 angussyd sshguard[92312]: Attack from "218.92.0.131" on service 100 with danger 10. May 30 17:52:08 angussyd sshd[65688]: Unable to negotiate with 37.49.225.93 port 50128: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] May 30 17:52:08 angussyd sshguard[92312]: Attack from "37.49.225.93" on service 100 with danger 10. May 30 18:00:11 angussyd sshd[66606]: Invalid user guest from 138.197.103.160 port 55486 May 30 18:00:11 angussyd sshguard[92312]: Attack from "138.197.103.160" on service 100 with danger 10. May 30 18:00:11 angussyd sshd[66606]: user NOUSER login class [preauth] May 30 18:00:11 angussyd sshd[66606]: Received disconnect from 138.197.103.160 port 55486:11: Normal Shutdown, Thank you for playing [preauth] May 30 18:00:11 angussyd sshd[66606]: Disconnected from invalid user guest 138.197.103.160 port 55486 [preauth] May 30 18:00:11 angussyd sshguard[92312]: Attack from "138.197.103.160" on service 100 with danger 10. May 30 18:04:26 angussyd sshd[66677]: Invalid user usuario from 196.203.31.154 port 52631 May 30 18:04:26 angussyd sshguard[92312]: Attack from "196.203.31.154" on service 100 with danger 10. May 30 18:04:26 angussyd sshd[66677]: user NOUSER login class [preauth] May 30 18:04:26 angussyd sshd[66677]: Received disconnect from 196.203.31.154 port 52631:11: Normal Shutdown, Thank you for playing [preauth] May 30 18:04:26 angussyd sshd[66677]: Disconnected from invalid user usuario 196.203.31.154 port 52631 [preauth] May 30 18:04:26 angussyd sshguard[92312]: Attack from "196.203.31.154" on service 100 with danger 10. May 30 18:10:14 angussyd sshd[67171]: Unable to negotiate with 183.105.56.37 port 60967: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth] May 30 18:10:14 angussyd sshguard[92312]: Attack from "183.105.56.37" on service 100 with danger 10. May 30 18:14:02 angussyd sshd[67763]: Connection closed by 139.59.150.146 port 44988 [preauth] May 30 18:14:02 angussyd sshguard[92312]: Attack from "139.59.150.146" on service 100 with danger 2. May 30 18:14:35 angussyd sshd[68052]: Received disconnect from 142.93.153.153 port 54514:11: Bye Bye [preauth] May 30 18:14:35 angussyd sshd[68052]: Disconnected from 142.93.153.153 port 54514 [preauth] May 30 18:14:35 angussyd sshguard[92312]: Attack from "142.93.153.153" on service 100 with danger 10. May 30 18:14:49 angussyd sshd[68602]: Invalid user zimbra from 206.189.145.152 port 11411 May 30 18:14:49 angussyd sshguard[92312]: Attack from "206.189.145.152" on service 100 with danger 10. May 30 18:14:49 angussyd sshd[68602]: user NOUSER login class [preauth] May 30 18:14:50 angussyd sshd[68602]: Received disconnect from 206.189.145.152 port 11411:11: Normal Shutdown, Thank you for playing [preauth] May 30 18:14:50 angussyd sshd[68602]: Disconnected from invalid user zimbra 206.189.145.152 port 11411 [preauth] May 30 18:14:50 angussyd sshguard[92312]: Attack from "206.189.145.152" on service 100 with danger 10. May 30 18:26:24 angussyd sshd[69121]: Invalid user squid from 27.71.232.58 port 33290 May 30 18:26:24 angussyd sshguard[92312]: Attack from "27.71.232.58" on service 100 with danger 10. May 30 18:26:24 angussyd sshd[69121]: user NOUSER login class [preauth] May 30 18:26:25 angussyd sshd[69121]: Received disconnect from 27.71.232.58 port 33290:11: Normal Shutdown, Thank you for playing [preauth] May 30 18:26:25 angussyd sshd[69121]: Disconnected from invalid user squid 27.71.232.58 port 33290 [preauth] May 30 18:26:25 angussyd sshguard[92312]: Attack from "27.71.232.58" on service 100 with danger 10. May 30 18:44:45 angussyd sshd[69473]: Received disconnect from 134.209.84.42 port 50218:11: Bye Bye [preauth] May 30 18:44:45 angussyd sshd[69473]: Disconnected from 134.209.84.42 port 50218 [preauth] May 30 18:44:45 angussyd sshguard[92312]: Attack from "134.209.84.42" on service 100 with danger 10. May 30 18:45:45 angussyd sshd[69815]: user admin login class [preauth] May 30 18:45:46 angussyd sshd[69815]: Disconnecting authenticating user admin 185.232.67.11 port 57033: Change of username or service not allowed: (admin,ssh-connection) -> (user,ssh-connection) [preauth] May 30 18:46:58 angussyd sshd[69880]: user root login class [preauth] May 30 18:46:58 angussyd sshd[69880]: Received disconnect from 206.189.86.17 port 38817:11: Normal Shutdown, Thank you for playing [preauth] May 30 18:46:58 angussyd sshd[69880]: Disconnected from authenticating user root 206.189.86.17 port 38817 [preauth] May 30 18:46:58 angussyd sshguard[92312]: Attack from "206.189.86.17" on service 100 with danger 10. May 30 18:55:42 angussyd sshd[70288]: Invalid user qhsupport from 151.80.153.174 port 58308 May 30 18:55:42 angussyd sshguard[92312]: Attack from "151.80.153.174" on service 100 with danger 10. May 30 18:55:42 angussyd sshd[70288]: user NOUSER login class [preauth] May 30 18:55:43 angussyd sshd[70288]: Received disconnect from 151.80.153.174 port 58308:11: Normal Shutdown, Thank you for playing [preauth] May 30 18:55:43 angussyd sshd[70288]: Disconnected from invalid user qhsupport 151.80.153.174 port 58308 [preauth] May 30 18:55:43 angussyd sshguard[92312]: Attack from "151.80.153.174" on service 100 with danger 10. May 30 19:04:53 angussyd sshd[70987]: Received disconnect from 134.209.82.3 port 40230:11: Bye Bye [preauth] May 30 19:04:53 angussyd sshd[70987]: Disconnected from 134.209.82.3 port 40230 [preauth] May 30 19:04:53 angussyd sshguard[92312]: Attack from "134.209.82.3" on service 100 with danger 10. May 30 19:10:13 angussyd sshd[71392]: Connection closed by 58.87.88.98 port 39558 [preauth] May 30 19:10:13 angussyd sshguard[92312]: Attack from "58.87.88.98" on service 100 with danger 2. May 30 19:27:08 angussyd sshd[71813]: Invalid user test7 from 206.189.131.213 port 44058 May 30 19:27:08 angussyd sshguard[92312]: Attack from "206.189.131.213" on service 100 with danger 10. May 30 19:27:08 angussyd sshd[71813]: user NOUSER login class [preauth] May 30 19:27:08 angussyd sshd[71813]: Received disconnect from 206.189.131.213 port 44058:11: Normal Shutdown, Thank you for playing [preauth] May 30 19:27:08 angussyd sshd[71813]: Disconnected from invalid user test7 206.189.131.213 port 44058 [preauth] May 30 19:27:08 angussyd sshguard[92312]: Attack from "206.189.131.213" on service 100 with danger 10. May 30 19:28:10 angussyd sshd[72179]: Received disconnect from 68.183.99.64 port 47154:11: Bye Bye [preauth] May 30 19:28:10 angussyd sshd[72179]: Disconnected from 68.183.99.64 port 47154 [preauth] May 30 19:28:10 angussyd sshguard[92312]: Attack from "68.183.99.64" on service 100 with danger 10. May 30 19:49:14 angussyd sshd[72618]: Invalid user oracle from 89.189.154.66 port 55070 May 30 19:49:14 angussyd sshguard[92312]: Attack from "89.189.154.66" on service 100 with danger 10. May 30 19:49:14 angussyd sshd[72618]: user NOUSER login class [preauth] May 30 19:49:14 angussyd sshd[72618]: Received disconnect from 89.189.154.66 port 55070:11: Normal Shutdown, Thank you for playing [preauth] May 30 19:49:14 angussyd sshd[72618]: Disconnected from invalid user oracle 89.189.154.66 port 55070 [preauth] May 30 19:49:14 angussyd sshguard[92312]: Attack from "89.189.154.66" on service 100 with danger 10. May 30 20:06:22 angussyd sshd[73150]: Invalid user ftp from 98.234.14.119 port 45812 May 30 20:06:22 angussyd sshguard[92312]: Attack from "98.234.14.119" on service 100 with danger 10. May 30 20:06:22 angussyd sshd[73150]: user NOUSER login class [preauth] May 30 20:06:22 angussyd sshd[73150]: Received disconnect from 98.234.14.119 port 45812:11: Normal Shutdown, Thank you for playing [preauth] May 30 20:06:22 angussyd sshd[73150]: Disconnected from invalid user ftp 98.234.14.119 port 45812 [preauth] May 30 20:06:22 angussyd sshguard[92312]: Attack from "98.234.14.119" on service 100 with danger 10. May 30 20:45:10 angussyd sshd[73570]: Invalid user nagios from 206.189.91.174 port 60428 May 30 20:45:10 angussyd sshguard[92312]: Attack from "206.189.91.174" on service 100 with danger 10. May 30 20:45:10 angussyd sshd[73570]: user NOUSER login class [preauth] May 30 20:45:10 angussyd sshd[73570]: Received disconnect from 206.189.91.174 port 60428:11: Normal Shutdown, Thank you for playing [preauth] May 30 20:45:10 angussyd sshd[73570]: Disconnected from invalid user nagios 206.189.91.174 port 60428 [preauth] May 30 20:45:10 angussyd sshguard[92312]: Attack from "206.189.91.174" on service 100 with danger 10. May 30 20:53:59 angussyd sshd[73963]: Connection closed by 192.99.12.24 port 54724 [preauth] May 30 20:53:59 angussyd sshguard[92312]: Attack from "192.99.12.24" on service 100 with danger 2. May 30 20:54:43 angussyd sshd[74532]: Invalid user niu from 109.50.193.176 port 36736 May 30 20:54:43 angussyd sshguard[92312]: Attack from "109.50.193.176" on service 100 with danger 10. May 30 20:54:43 angussyd sshd[74532]: user NOUSER login class [preauth] May 30 20:54:43 angussyd sshd[74532]: Received disconnect from 109.50.193.176 port 36736:11: Bye Bye [preauth] May 30 20:54:43 angussyd sshd[74532]: Disconnected from invalid user niu 109.50.193.176 port 36736 [preauth] May 30 20:54:43 angussyd sshguard[92312]: Attack from "109.50.193.176" on service 100 with danger 10. May 30 20:55:19 angussyd sshd[74834]: Connection closed by 119.29.10.25 port 58055 [preauth] May 30 20:55:19 angussyd sshguard[92312]: Attack from "119.29.10.25" on service 100 with danger 2. May 30 21:06:01 angussyd sshd[75331]: user root login class [preauth] May 30 21:06:01 angussyd sshd[75331]: Received disconnect from 128.199.90.245 port 44973:11: Normal Shutdown, Thank you for playing [preauth] May 30 21:06:01 angussyd sshd[75331]: Disconnected from authenticating user root 128.199.90.245 port 44973 [preauth] May 30 21:06:01 angussyd sshguard[92312]: Attack from "128.199.90.245" on service 100 with danger 10. May 30 21:10:49 angussyd sshd[75727]: Connection closed by 139.59.190.69 port 36233 [preauth] May 30 21:10:49 angussyd sshguard[92312]: Attack from "139.59.190.69" on service 100 with danger 2. May 30 21:12:16 angussyd sshd[75989]: Connection closed by 103.97.5.44 port 50227 [preauth] May 30 21:12:16 angussyd sshguard[92312]: Attack from "103.97.5.44" on service 100 with danger 2. May 30 21:12:37 angussyd sshd[76099]: Connection closed by 202.120.40.69 port 44719 [preauth] May 30 21:12:37 angussyd sshguard[92312]: Attack from "202.120.40.69" on service 100 with danger 2. May 30 21:13:17 angussyd sshd[76460]: Connection closed by 58.59.2.26 port 43650 [preauth] May 30 21:13:17 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 30 21:14:13 angussyd sshd[76597]: Connection closed by 190.244.81.198 port 32784 [preauth] May 30 21:14:13 angussyd sshguard[92312]: Attack from "190.244.81.198" on service 100 with danger 2. May 30 21:21:41 angussyd sshd[76978]: Connection closed by 58.59.2.26 port 59732 [preauth] May 30 21:21:41 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 30 21:30:35 angussyd sshd[77209]: Connection closed by 58.59.2.26 port 32896 [preauth] May 30 21:30:35 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 30 21:47:35 angussyd sshd[77551]: Connection closed by 58.59.2.26 port 58690 [preauth] May 30 21:47:35 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 30 21:56:17 angussyd sshd[77872]: Connection closed by 58.59.2.26 port 60574 [preauth] May 30 21:56:17 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 30 22:04:38 angussyd sshd[78182]: Connection closed by 58.59.2.26 port 32882 [preauth] May 30 22:04:38 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 30 22:08:21 angussyd sshd[78261]: Connection closed by 118.89.48.251 port 41444 [preauth] May 30 22:08:21 angussyd sshguard[92312]: Attack from "118.89.48.251" on service 100 with danger 2. May 30 22:12:08 angussyd sshd[78431]: Connection closed by 118.89.35.168 port 35452 [preauth] May 30 22:12:08 angussyd sshguard[92312]: Attack from "118.89.35.168" on service 100 with danger 2. May 30 22:12:31 angussyd sshd[78736]: Connection closed by 193.109.144.20 port 58230 [preauth] May 30 22:12:31 angussyd sshguard[92312]: Attack from "193.109.144.20" on service 100 with danger 2. May 30 22:17:30 angussyd sshd[79028]: Connection closed by 58.87.106.183 port 58404 [preauth] May 30 22:17:30 angussyd sshguard[92312]: Attack from "58.87.106.183" on service 100 with danger 2. May 30 22:19:49 angussyd sshd[79348]: Connection closed by 123.207.99.21 port 33728 [preauth] May 30 22:19:49 angussyd sshguard[92312]: Attack from "123.207.99.21" on service 100 with danger 2. May 30 22:21:10 angussyd sshd[79677]: user root login class [preauth] May 30 22:21:10 angussyd sshd[79677]: Received disconnect from 138.197.103.160 port 51660:11: Normal Shutdown, Thank you for playing [preauth] May 30 22:21:10 angussyd sshd[79677]: Disconnected from authenticating user root 138.197.103.160 port 51660 [preauth] May 30 22:21:10 angussyd sshguard[92312]: Attack from "138.197.103.160" on service 100 with danger 10. May 30 22:23:54 angussyd sshd[80119]: Received disconnect from 165.22.122.204 port 52000:11: Bye Bye [preauth] May 30 22:23:54 angussyd sshd[80119]: Disconnected from 165.22.122.204 port 52000 [preauth] May 30 22:23:54 angussyd sshguard[92312]: Attack from "165.22.122.204" on service 100 with danger 10. May 30 22:37:21 angussyd sshd[80311]: Invalid user jboss from 104.236.81.204 port 58797 May 30 22:37:21 angussyd sshguard[92312]: Attack from "104.236.81.204" on service 100 with danger 10. May 30 22:37:21 angussyd sshd[80311]: user NOUSER login class [preauth] May 30 22:37:21 angussyd sshd[80311]: Received disconnect from 104.236.81.204 port 58797:11: Normal Shutdown, Thank you for playing [preauth] May 30 22:37:21 angussyd sshd[80311]: Disconnected from invalid user jboss 104.236.81.204 port 58797 [preauth] May 30 22:37:21 angussyd sshguard[92312]: Attack from "104.236.81.204" on service 100 with danger 10. May 30 22:37:51 angussyd sshd[80799]: Invalid user avis from 110.45.145.178 port 39640 May 30 22:37:51 angussyd sshguard[92312]: Attack from "110.45.145.178" on service 100 with danger 10. May 30 22:37:51 angussyd sshd[80799]: user NOUSER login class [preauth] May 30 22:37:51 angussyd sshd[80799]: Received disconnect from 110.45.145.178 port 39640:11: Normal Shutdown, Thank you for playing [preauth] May 30 22:37:51 angussyd sshd[80799]: Disconnected from invalid user avis 110.45.145.178 port 39640 [preauth] May 30 22:37:51 angussyd sshguard[92312]: Attack from "110.45.145.178" on service 100 with danger 10. May 30 22:41:29 angussyd sshd[81160]: Did not receive identification string from 149.56.12.124 port 33627 May 30 22:41:29 angussyd sshguard[92312]: Attack from "149.56.12.124" on service 100 with danger 10. May 30 22:41:38 angussyd sshd[81485]: Invalid user avis from 159.65.81.187 port 44266 May 30 22:41:38 angussyd sshguard[92312]: Attack from "159.65.81.187" on service 100 with danger 10. May 30 22:41:38 angussyd sshd[81485]: user NOUSER login class [preauth] May 30 22:41:38 angussyd sshd[81485]: Received disconnect from 159.65.81.187 port 44266:11: Normal Shutdown, Thank you for playing [preauth] May 30 22:41:38 angussyd sshd[81485]: Disconnected from invalid user avis 159.65.81.187 port 44266 [preauth] May 30 22:41:38 angussyd sshguard[92312]: Attack from "159.65.81.187" on service 100 with danger 10. May 30 22:54:13 angussyd sshd[81934]: Unable to negotiate with 218.92.0.204 port 55878: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 22:54:13 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 30 22:55:22 angussyd sshd[82111]: Unable to negotiate with 218.92.0.204 port 49979: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 22:55:22 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 30 22:56:27 angussyd sshd[82452]: Unable to negotiate with 218.92.0.204 port 32121: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 30 22:56:27 angussyd sshguard[92312]: Attack from "218.92.0.204" on service 100 with danger 10. May 30 22:56:27 angussyd sshguard[92312]: Blocking "218.92.0.204/32" for 30720 secs (3 attacks in 134 secs, after 9 abuses over 93157 secs.) May 30 23:08:27 angussyd sshd[83273]: user root login class [preauth] May 30 23:08:27 angussyd sshd[83273]: Received disconnect from 128.199.69.86 port 45910:11: Normal Shutdown, Thank you for playing [preauth] May 30 23:08:27 angussyd sshd[83273]: Disconnected from authenticating user root 128.199.69.86 port 45910 [preauth] May 30 23:08:27 angussyd sshguard[92312]: Attack from "128.199.69.86" on service 100 with danger 10. May 30 23:31:37 angussyd sshd[83557]: user root login class [preauth] May 30 23:31:37 angussyd sshd[83557]: Received disconnect from 159.65.245.203 port 45944:11: Normal Shutdown, Thank you for playing [preauth] May 30 23:31:37 angussyd sshd[83557]: Disconnected from authenticating user root 159.65.245.203 port 45944 [preauth] May 30 23:31:37 angussyd sshguard[92312]: Attack from "159.65.245.203" on service 100 with danger 10. May 30 23:40:45 angussyd sshd[83883]: Connection closed by 202.105.182.132 port 33157 [preauth] May 30 23:40:45 angussyd sshguard[92312]: Attack from "202.105.182.132" on service 100 with danger 2. May 30 23:44:22 angussyd sshd[84188]: Received disconnect from 185.244.25.218 port 34728:11: Bye Bye [preauth] May 30 23:44:22 angussyd sshd[84188]: Disconnected from 185.244.25.218 port 34728 [preauth] May 30 23:44:22 angussyd sshguard[92312]: Attack from "185.244.25.218" on service 100 with danger 10. May 30 23:45:05 angussyd sshd[84543]: Invalid user zimbra from 159.192.107.238 port 59640 May 30 23:45:05 angussyd sshguard[92312]: Attack from "159.192.107.238" on service 100 with danger 10. May 30 23:45:05 angussyd sshd[84543]: user NOUSER login class [preauth] May 30 23:45:05 angussyd sshd[84543]: Received disconnect from 159.192.107.238 port 59640:11: Normal Shutdown, Thank you for playing [preauth] May 30 23:45:05 angussyd sshd[84543]: Disconnected from invalid user zimbra 159.192.107.238 port 59640 [preauth] May 30 23:45:05 angussyd sshguard[92312]: Attack from "159.192.107.238" on service 100 with danger 10. May 30 23:51:53 angussyd sshd[84839]: user root login class [preauth] May 30 23:51:53 angussyd sshd[84839]: Received disconnect from 112.133.243.77 port 10868:11: Normal Shutdown, Thank you for playing [preauth] May 30 23:51:53 angussyd sshd[84839]: Disconnected from authenticating user root 112.133.243.77 port 10868 [preauth] May 30 23:51:53 angussyd sshguard[92312]: Attack from "112.133.243.77" on service 100 with danger 10. May 31 00:12:31 angussyd sshd[86947]: user root login class [preauth] May 31 00:12:31 angussyd sshd[86947]: Received disconnect from 206.189.137.113 port 54448:11: Normal Shutdown, Thank you for playing [preauth] May 31 00:12:31 angussyd sshd[86947]: Disconnected from authenticating user root 206.189.137.113 port 54448 [preauth] May 31 00:12:31 angussyd sshguard[92312]: Attack from "206.189.137.113" on service 100 with danger 10. May 31 00:22:46 angussyd sshd[87400]: Invalid user visitor from 132.255.29.228 port 60896 May 31 00:22:46 angussyd sshguard[92312]: Attack from "132.255.29.228" on service 100 with danger 10. May 31 00:22:46 angussyd sshd[87400]: user NOUSER login class [preauth] May 31 00:22:47 angussyd sshd[87400]: Received disconnect from 132.255.29.228 port 60896:11: Normal Shutdown, Thank you for playing [preauth] May 31 00:22:47 angussyd sshd[87400]: Disconnected from invalid user visitor 132.255.29.228 port 60896 [preauth] May 31 00:22:47 angussyd sshguard[92312]: Attack from "132.255.29.228" on service 100 with danger 10. May 31 00:26:19 angussyd sshd[87962]: Invalid user usuario from 46.101.235.214 port 44686 May 31 00:26:19 angussyd sshguard[92312]: Attack from "46.101.235.214" on service 100 with danger 10. May 31 00:26:19 angussyd sshd[87962]: user NOUSER login class [preauth] May 31 00:26:19 angussyd sshd[87962]: Received disconnect from 46.101.235.214 port 44686:11: Normal Shutdown, Thank you for playing [preauth] May 31 00:26:19 angussyd sshd[87962]: Disconnected from invalid user usuario 46.101.235.214 port 44686 [preauth] May 31 00:26:19 angussyd sshguard[92312]: Attack from "46.101.235.214" on service 100 with danger 10. May 31 00:27:59 angussyd sshd[88308]: Received disconnect from 198.98.60.66 port 55606:11: Bye Bye [preauth] May 31 00:27:59 angussyd sshd[88308]: Disconnected from 198.98.60.66 port 55606 [preauth] May 31 00:27:59 angussyd sshguard[92312]: Attack from "198.98.60.66" on service 100 with danger 10. May 31 00:28:25 angussyd sshd[88553]: user root login class [preauth] May 31 00:28:25 angussyd sshd[88553]: Received disconnect from 206.189.197.48 port 56990:11: Normal Shutdown, Thank you for playing [preauth] May 31 00:28:25 angussyd sshd[88553]: Disconnected from authenticating user root 206.189.197.48 port 56990 [preauth] May 31 00:28:25 angussyd sshguard[92312]: Attack from "206.189.197.48" on service 100 with danger 10. May 31 00:29:59 angussyd sshd[88688]: Invalid user ubuntu from 167.99.161.15 port 39880 May 31 00:29:59 angussyd sshguard[92312]: Attack from "167.99.161.15" on service 100 with danger 10. May 31 00:29:59 angussyd sshd[88688]: user NOUSER login class [preauth] May 31 00:29:59 angussyd sshd[88688]: Received disconnect from 167.99.161.15 port 39880:11: Normal Shutdown, Thank you for playing [preauth] May 31 00:29:59 angussyd sshd[88688]: Disconnected from invalid user ubuntu 167.99.161.15 port 39880 [preauth] May 31 00:29:59 angussyd sshguard[92312]: Attack from "167.99.161.15" on service 100 with danger 10. May 31 00:33:54 angussyd sshd[89542]: Invalid user support from 139.59.78.236 port 46516 May 31 00:33:54 angussyd sshguard[92312]: Attack from "139.59.78.236" on service 100 with danger 10. May 31 00:33:54 angussyd sshd[89542]: user NOUSER login class [preauth] May 31 00:33:54 angussyd sshd[89542]: Received disconnect from 139.59.78.236 port 46516:11: Normal Shutdown, Thank you for playing [preauth] May 31 00:33:54 angussyd sshd[89542]: Disconnected from invalid user support 139.59.78.236 port 46516 [preauth] May 31 00:33:54 angussyd sshguard[92312]: Attack from "139.59.78.236" on service 100 with danger 10. May 31 00:48:18 angussyd sshd[89898]: user root login class [preauth] May 31 00:48:18 angussyd sshd[89898]: Received disconnect from 80.151.229.8 port 17809:11: Normal Shutdown, Thank you for playing [preauth] May 31 00:48:18 angussyd sshd[89898]: Disconnected from authenticating user root 80.151.229.8 port 17809 [preauth] May 31 00:48:18 angussyd sshguard[92312]: Attack from "80.151.229.8" on service 100 with danger 10. May 31 01:01:00 angussyd sshd[90703]: user admin login class [preauth] May 31 01:01:01 angussyd sshd[90703]: Received disconnect from 194.150.15.70 port 41098:11: Normal Shutdown, Thank you for playing [preauth] May 31 01:01:01 angussyd sshd[90703]: Disconnected from authenticating user admin 194.150.15.70 port 41098 [preauth] May 31 01:01:01 angussyd sshguard[92312]: Attack from "194.150.15.70" on service 100 with danger 10. May 31 01:11:34 angussyd sshd[97973]: Invalid user test5 from 139.59.79.56 port 41144 May 31 01:11:34 angussyd sshguard[92312]: Attack from "139.59.79.56" on service 100 with danger 10. May 31 01:11:34 angussyd sshd[97973]: user NOUSER login class [preauth] May 31 01:11:34 angussyd sshd[97973]: Received disconnect from 139.59.79.56 port 41144:11: Normal Shutdown, Thank you for playing [preauth] May 31 01:11:34 angussyd sshd[97973]: Disconnected from invalid user test5 139.59.79.56 port 41144 [preauth] May 31 01:11:34 angussyd sshguard[92312]: Attack from "139.59.79.56" on service 100 with danger 10. May 31 01:22:41 angussyd sshd[98267]: user root login class [preauth] May 31 01:22:41 angussyd sshd[98267]: Received disconnect from 138.197.72.48 port 50312:11: Normal Shutdown, Thank you for playing [preauth] May 31 01:22:41 angussyd sshd[98267]: Disconnected from authenticating user root 138.197.72.48 port 50312 [preauth] May 31 01:22:41 angussyd sshguard[92312]: Attack from "138.197.72.48" on service 100 with danger 10. May 31 02:15:24 angussyd sshd[99705]: Connection closed by 90.182.142.105 port 46801 [preauth] May 31 02:15:24 angussyd sshguard[92312]: Attack from "90.182.142.105" on service 100 with danger 2. May 31 02:23:37 angussyd sshd[99918]: Unable to negotiate with 218.92.0.158 port 43830: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 31 02:23:37 angussyd sshguard[92312]: Attack from "218.92.0.158" on service 100 with danger 10. May 31 02:34:54 angussyd sshd[782]: Invalid user vision from 138.197.72.48 port 32994 May 31 02:34:54 angussyd sshguard[92312]: Attack from "138.197.72.48" on service 100 with danger 10. May 31 02:34:54 angussyd sshd[782]: user NOUSER login class [preauth] May 31 02:34:55 angussyd sshd[782]: Received disconnect from 138.197.72.48 port 32994:11: Normal Shutdown, Thank you for playing [preauth] May 31 02:34:55 angussyd sshd[782]: Disconnected from invalid user vision 138.197.72.48 port 32994 [preauth] May 31 02:34:55 angussyd sshguard[92312]: Attack from "138.197.72.48" on service 100 with danger 10. May 31 02:36:28 angussyd sshd[1023]: Did not receive identification string from 107.170.200.205 port 56976 May 31 02:36:28 angussyd sshguard[92312]: Attack from "107.170.200.205" on service 100 with danger 10. May 31 02:45:24 angussyd sshd[1098]: Connection closed by 58.59.2.26 port 54050 [preauth] May 31 02:45:24 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 02:51:32 angussyd sshd[1560]: Connection closed by 176.31.182.125 port 43525 [preauth] May 31 02:51:32 angussyd sshguard[92312]: Attack from "176.31.182.125" on service 100 with danger 2. May 31 02:54:00 angussyd sshd[1983]: user admin login class [preauth] May 31 02:54:01 angussyd sshd[1983]: Connection closed by authenticating user admin 188.19.104.9 port 38983 [preauth] May 31 02:54:10 angussyd sshd[2215]: Connection closed by 183.196.213.107 port 39868 [preauth] May 31 02:54:10 angussyd sshguard[92312]: Attack from "183.196.213.107" on service 100 with danger 2. May 31 02:58:17 angussyd sshd[2339]: Connection closed by 58.59.2.26 port 41044 [preauth] May 31 02:58:17 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 03:00:28 angussyd sshd[3336]: Received disconnect from 165.22.127.50 port 52884:11: Bye Bye [preauth] May 31 03:00:28 angussyd sshd[3336]: Disconnected from 165.22.127.50 port 52884 [preauth] May 31 03:00:28 angussyd sshguard[92312]: Attack from "165.22.127.50" on service 100 with danger 10. May 31 03:06:40 angussyd sshd[4005]: Connection closed by 58.59.2.26 port 60350 [preauth] May 31 03:06:40 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 03:14:59 angussyd sshd[4452]: Connection closed by 58.59.2.26 port 58318 [preauth] May 31 03:14:59 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 03:23:38 angussyd sshd[4935]: Connection closed by 58.59.2.26 port 38968 [preauth] May 31 03:23:38 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 03:31:47 angussyd sshd[5784]: Connection closed by 58.59.2.26 port 37710 [preauth] May 31 03:31:47 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 03:40:31 angussyd sshd[6196]: Invalid user webmaster from 185.77.243.86 port 56121 May 31 03:40:31 angussyd sshguard[92312]: Attack from "185.77.243.86" on service 100 with danger 10. May 31 03:40:31 angussyd sshd[6196]: user NOUSER login class [preauth] May 31 03:40:31 angussyd sshd[6196]: Received disconnect from 185.77.243.86 port 56121:11: Normal Shutdown, Thank you for playing [preauth] May 31 03:40:31 angussyd sshd[6196]: Disconnected from invalid user webmaster 185.77.243.86 port 56121 [preauth] May 31 03:40:31 angussyd sshguard[92312]: Attack from "185.77.243.86" on service 100 with danger 10. May 31 03:40:37 angussyd sshd[6576]: Connection closed by 58.59.2.26 port 56208 [preauth] May 31 03:40:37 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 03:45:13 angussyd sshd[6854]: user root login class [preauth] May 31 03:45:13 angussyd sshd[6854]: Received disconnect from 196.1.99.12 port 59930:11: Normal Shutdown, Thank you for playing [preauth] May 31 03:45:13 angussyd sshd[6854]: Disconnected from authenticating user root 196.1.99.12 port 59930 [preauth] May 31 03:45:13 angussyd sshguard[92312]: Attack from "196.1.99.12" on service 100 with danger 10. May 31 03:48:45 angussyd sshd[7162]: Connection closed by 58.59.2.26 port 58562 [preauth] May 31 03:48:45 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 03:53:41 angussyd sshd[7585]: Connection closed by 118.89.35.168 port 33694 [preauth] May 31 03:53:41 angussyd sshguard[92312]: Attack from "118.89.35.168" on service 100 with danger 2. May 31 03:57:04 angussyd sshd[7710]: Connection closed by 58.59.2.26 port 48700 [preauth] May 31 03:57:04 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 04:03:24 angussyd sshd[8807]: Unable to negotiate with 182.122.171.48 port 52763: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth] May 31 04:03:24 angussyd sshguard[92312]: Attack from "182.122.171.48" on service 100 with danger 10. May 31 04:06:18 angussyd sshd[9363]: Connection closed by 58.59.2.26 port 41196 [preauth] May 31 04:06:18 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 04:11:56 angussyd sshd[9932]: Connection closed by 81.218.141.8 port 58208 [preauth] May 31 04:11:56 angussyd sshguard[92312]: Attack from "81.218.141.8" on service 100 with danger 2. May 31 04:14:39 angussyd sshd[10181]: Connection closed by 58.59.2.26 port 46158 [preauth] May 31 04:14:39 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 04:16:19 angussyd sshd[10439]: Connection closed by 203.176.131.246 port 56822 [preauth] May 31 04:16:19 angussyd sshguard[92312]: Attack from "203.176.131.246" on service 100 with danger 2. May 31 04:18:15 angussyd sshd[10664]: Invalid user test from 167.99.161.15 port 38886 May 31 04:18:15 angussyd sshguard[92312]: Attack from "167.99.161.15" on service 100 with danger 10. May 31 04:18:15 angussyd sshd[10664]: user NOUSER login class [preauth] May 31 04:18:15 angussyd sshd[10664]: Received disconnect from 167.99.161.15 port 38886:11: Normal Shutdown, Thank you for playing [preauth] May 31 04:18:15 angussyd sshd[10664]: Disconnected from invalid user test 167.99.161.15 port 38886 [preauth] May 31 04:18:15 angussyd sshguard[92312]: Attack from "167.99.161.15" on service 100 with danger 10. May 31 04:21:05 angussyd sshd[11134]: Invalid user zimbra from 178.128.195.6 port 48432 May 31 04:21:05 angussyd sshguard[92312]: Attack from "178.128.195.6" on service 100 with danger 10. May 31 04:21:05 angussyd sshd[11134]: user NOUSER login class [preauth] May 31 04:21:06 angussyd sshd[11134]: Received disconnect from 178.128.195.6 port 48432:11: Normal Shutdown, Thank you for playing [preauth] May 31 04:21:06 angussyd sshd[11134]: Disconnected from invalid user zimbra 178.128.195.6 port 48432 [preauth] May 31 04:21:06 angussyd sshguard[92312]: Attack from "178.128.195.6" on service 100 with danger 10. May 31 04:22:35 angussyd sshd[11485]: Connection closed by 58.59.2.26 port 57102 [preauth] May 31 04:22:35 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 04:30:31 angussyd sshd[11580]: Connection closed by 58.59.2.26 port 52446 [preauth] May 31 04:30:31 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 04:38:29 angussyd sshd[13285]: Connection closed by 58.59.2.26 port 55146 [preauth] May 31 04:38:29 angussyd sshguard[92312]: Attack from "58.59.2.26" on service 100 with danger 2. May 31 04:50:10 angussyd sshd[13849]: Invalid user mitesh from 93.43.24.245 port 33228 May 31 04:50:10 angussyd sshguard[92312]: Attack from "93.43.24.245" on service 100 with danger 10. May 31 04:50:10 angussyd sshd[13849]: user NOUSER login class [preauth] May 31 04:50:10 angussyd sshd[13849]: Received disconnect from 93.43.24.245 port 33228:11: Bye Bye [preauth] May 31 04:50:10 angussyd sshd[13849]: Disconnected from invalid user mitesh 93.43.24.245 port 33228 [preauth] May 31 04:50:10 angussyd sshguard[92312]: Attack from "93.43.24.245" on service 100 with danger 10. May 31 05:15:12 angussyd sshd[14706]: Unable to negotiate with 183.157.175.231 port 25401: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth] May 31 05:15:12 angussyd sshguard[92312]: Attack from "183.157.175.231" on service 100 with danger 10. May 31 05:16:43 angussyd sshd[15111]: Connection closed by 88.152.105.189 port 49716 [preauth] May 31 05:16:43 angussyd sshguard[92312]: Attack from "88.152.105.189" on service 100 with danger 2. May 31 05:21:15 angussyd sshd[15625]: Connection closed by 129.211.10.211 port 60678 [preauth] May 31 05:21:15 angussyd sshguard[92312]: Attack from "129.211.10.211" on service 100 with danger 2. May 31 05:26:04 angussyd sshd[16183]: Invalid user jboss from 159.192.107.238 port 54640 May 31 05:26:04 angussyd sshguard[92312]: Attack from "159.192.107.238" on service 100 with danger 10. May 31 05:26:04 angussyd sshd[16183]: user NOUSER login class [preauth] May 31 05:26:04 angussyd sshd[16183]: Received disconnect from 159.192.107.238 port 54640:11: Normal Shutdown, Thank you for playing [preauth] May 31 05:26:04 angussyd sshd[16183]: Disconnected from invalid user jboss 159.192.107.238 port 54640 [preauth] May 31 05:26:04 angussyd sshguard[92312]: Attack from "159.192.107.238" on service 100 with danger 10. May 31 05:36:13 angussyd sshd[16858]: Connection closed by 40.117.210.216 port 43229 [preauth] May 31 05:36:13 angussyd sshguard[92312]: Attack from "40.117.210.216" on service 100 with danger 2. May 31 05:38:15 angussyd sshd[17137]: user root login class [preauth] May 31 05:38:15 angussyd sshd[17137]: Received disconnect from 196.203.31.154 port 43101:11: Normal Shutdown, Thank you for playing [preauth] May 31 05:38:15 angussyd sshd[17137]: Disconnected from authenticating user root 196.203.31.154 port 43101 [preauth] May 31 05:38:15 angussyd sshguard[92312]: Attack from "196.203.31.154" on service 100 with danger 10. May 31 05:45:22 angussyd sshd[17403]: Received disconnect from 128.199.55.17 port 58978:11: Bye Bye [preauth] May 31 05:45:22 angussyd sshd[17403]: Disconnected from 128.199.55.17 port 58978 [preauth] May 31 05:45:22 angussyd sshguard[92312]: Attack from "128.199.55.17" on service 100 with danger 10. May 31 06:05:35 angussyd sshd[18120]: Invalid user postgres from 139.59.92.10 port 59938 May 31 06:05:35 angussyd sshguard[92312]: Attack from "139.59.92.10" on service 100 with danger 10. May 31 06:05:35 angussyd sshd[18120]: user NOUSER login class [preauth] May 31 06:05:35 angussyd sshd[18120]: Received disconnect from 139.59.92.10 port 59938:11: Normal Shutdown, Thank you for playing [preauth] May 31 06:05:35 angussyd sshd[18120]: Disconnected from invalid user postgres 139.59.92.10 port 59938 [preauth] May 31 06:05:35 angussyd sshguard[92312]: Attack from "139.59.92.10" on service 100 with danger 10. May 31 06:09:41 angussyd sshd[18407]: Connection closed by 5.3.6.82 port 40138 [preauth] May 31 06:09:41 angussyd sshguard[92312]: Attack from "5.3.6.82" on service 100 with danger 2. May 31 06:15:05 angussyd sshd[18811]: user admin login class [preauth] May 31 06:15:06 angussyd sshd[18811]: Disconnecting authenticating user admin 193.32.163.81 port 24942: Change of username or service not allowed: (admin,ssh-connection) -> (user,ssh-connection) [preauth] May 31 06:31:32 angussyd sshd[19204]: Received disconnect from 165.227.46.17 port 38368:11: Bye Bye [preauth] May 31 06:31:32 angussyd sshd[19204]: Disconnected from 165.227.46.17 port 38368 [preauth] May 31 06:31:32 angussyd sshguard[92312]: Attack from "165.227.46.17" on service 100 with danger 10. May 31 06:32:50 angussyd sshd[19491]: Received disconnect from 128.199.55.17 port 50256:11: Bye Bye [preauth] May 31 06:32:50 angussyd sshd[19491]: Disconnected from 128.199.55.17 port 50256 [preauth] May 31 06:32:50 angussyd sshguard[92312]: Attack from "128.199.55.17" on service 100 with danger 10. May 31 06:35:33 angussyd sshd[19706]: Invalid user ftpuser from 182.18.161.187 port 43947 May 31 06:35:33 angussyd sshguard[92312]: Attack from "182.18.161.187" on service 100 with danger 10. May 31 06:35:33 angussyd sshd[19706]: user NOUSER login class [preauth] May 31 06:35:33 angussyd sshd[19706]: Received disconnect from 182.18.161.187 port 43947:11: Normal Shutdown, Thank you for playing [preauth] May 31 06:35:33 angussyd sshd[19706]: Disconnected from invalid user ftpuser 182.18.161.187 port 43947 [preauth] May 31 06:35:33 angussyd sshguard[92312]: Attack from "182.18.161.187" on service 100 with danger 10. May 31 06:42:23 angussyd sshd[20025]: Invalid user ftp from 139.59.85.89 port 60553 May 31 06:42:23 angussyd sshguard[92312]: Attack from "139.59.85.89" on service 100 with danger 10. May 31 06:42:23 angussyd sshd[20025]: user NOUSER login class [preauth] May 31 06:42:23 angussyd sshd[20025]: Received disconnect from 139.59.85.89 port 60553:11: Normal Shutdown, Thank you for playing [preauth] May 31 06:42:23 angussyd sshd[20025]: Disconnected from invalid user ftp 139.59.85.89 port 60553 [preauth] May 31 06:42:23 angussyd sshguard[92312]: Attack from "139.59.85.89" on service 100 with danger 10. May 31 06:58:01 angussyd sshd[20437]: Received disconnect from 207.154.201.204 port 46000:11: Bye Bye [preauth] May 31 06:58:01 angussyd sshd[20437]: Disconnected from 207.154.201.204 port 46000 [preauth] May 31 06:58:01 angussyd sshguard[92312]: Attack from "207.154.201.204" on service 100 with danger 10. May 31 07:04:01 angussyd sshd[20941]: user admin login class [preauth] May 31 07:04:02 angussyd sshd[20941]: Received disconnect from 45.55.42.17 port 54302:11: Normal Shutdown, Thank you for playing [preauth] May 31 07:04:02 angussyd sshd[20941]: Disconnected from authenticating user admin 45.55.42.17 port 54302 [preauth] May 31 07:04:02 angussyd sshguard[92312]: Attack from "45.55.42.17" on service 100 with danger 10. May 31 07:17:26 angussyd sshd[21146]: user root login class [preauth] May 31 07:17:26 angussyd sshd[21146]: Received disconnect from 188.166.72.240 port 33226:11: Normal Shutdown, Thank you for playing [preauth] May 31 07:17:26 angussyd sshd[21146]: Disconnected from authenticating user root 188.166.72.240 port 33226 [preauth] May 31 07:17:26 angussyd sshguard[92312]: Attack from "188.166.72.240" on service 100 with danger 10. May 30 21:19:55 angussyd check_reload_status: Linkup starting e6000sw0port2 May 31 07:19:55 angussyd kernel: e6000sw0port2: link state changed to UP May 31 07:20:58 angussyd sshd[21925]: user root login class [preauth] May 31 07:20:58 angussyd sshd[21925]: user root login class [preauth] May 31 07:20:58 angussyd sshd[21925]: user root login class [preauth] May 31 07:20:58 angussyd sshd[21925]: Accepted publickey for root from 192.168.1.100 port 57797 ssh2: RSA SHA256:64rtLAhN8dC/6fonvpIidF/HjsZgWThxA845wCR64Hs May 31 07:27:34 angussyd kernel: ugen0.2: at usbus0 May 31 07:27:34 angussyd kernel: umass0 on uhub0 May 31 07:27:34 angussyd kernel: umass0: on usbus0 May 31 07:27:34 angussyd kernel: da0 at umass-sim0 bus 0 scbus5 target 0 lun 0 May 31 07:27:34 angussyd kernel: da0: Removable Direct Access SPC-4 SCSI device May 31 07:27:34 angussyd kernel: da0: Serial Number 4C530001010204115044 May 31 07:27:34 angussyd kernel: da0: 400.000MB/s transfers May 31 07:27:34 angussyd kernel: da0: 58656MB (120127488 512 byte sectors) May 31 07:27:34 angussyd kernel: da0: quirks=0x2 ort 53281: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:41:33 angussyd sshd[9455]: Unable to negotiate with 218.92.0.204 port 52745: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:42:33 angussyd sshd[34681]: Unable to negotiate with 218.92.0.204 port 26073: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:43:27 angussyd sshd[60731]: Unable to negotiate with 218.92.0.204 port 42548: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:44:35 angussyd sshd[87900]: Unable to negotiate with 218.92.0.204 port 18593: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:45:30 angussyd sshd[12433]: Unable to negotiate with 218.92.0.204 port 37080: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:46:24 angussyd sshd[39084]: Unable to negotiate with 218.92.0.204 port 42433: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:47:19 angussyd sshd[39481]: Unable to negotiate with 218.92.0.204 port 55982: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:48:18 angussyd sshd[64749]: Unable to negotiate with 218.92.0.204 port 35922: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:49:13 angussyd sshd[91071]: Unable to negotiate with 218.92.0.204 port 59197: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:50:03 angussyd sshd[17250]: Unable to negotiate with 218.92.0.204 port 13743: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:51:01 angussyd sshd[43872]: Unable to negotiate with 218.92.0.204 port 40786: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:52:02 angussyd sshd[68508]: Unable to negotiate with 218.92.0.204 port 31040: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:53:04 angussyd sshd[92328]: Unable to negotiate with 218.92.0.204 port 18460: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:53:57 angussyd sshd[18376]: Unable to negotiate with 218.92.0.204 port 24525: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:54:57 angussyd sshd[41722]: Unable to negotiate with 218.92.0.204 port 56234: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:55:56 angussyd sshd[67573]: Unable to negotiate with 218.92.0.204 port 49476: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:56:53 angussyd sshd[91797]: Unable to negotiate with 218.92.0.204 port 25426: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:57:46 angussyd sshd[16992]: Unable to negotiate with 218.92.0.204 port 44579: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:58:43 angussyd sshd[43695]: Unable to negotiate with 218.92.0.204 port 56926: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 03:59:41 angussyd sshd[67363]: Unable to negotiate with 218.92.0.204 port 36900: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:00:33 angussyd sshd[69171]: Unable to negotiate with 218.92.0.204 port 50255: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:01:27 angussyd sshd[94470]: Unable to negotiate with 218.92.0.204 port 62348: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:02:24 angussyd sshd[23017]: Unable to negotiate with 218.92.0.204 port 41682: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:03:22 angussyd sshd[50423]: Unable to negotiate with 218.92.0.204 port 27506: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:04:16 angussyd sshd[77831]: Unable to negotiate with 218.92.0.204 port 37143: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:05:15 angussyd sshd[3547]: Unable to negotiate with 218.92.0.204 port 64166: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:06:22 angussyd sshd[29173]: Unable to negotiate with 218.92.0.204 port 33577: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:07:23 angussyd sshd[55871]: Unable to negotiate with 218.92.0.204 port 27285: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:08:16 angussyd sshd[80046]: Unable to negotiate with 218.92.0.204 port 45858: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:09:13 angussyd sshd[5070]: Unable to negotiate with 218.92.0.204 port 19518: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:09:59 angussyd sshd[31138]: Connection closed by 191.8.190.32 port 32898 [preauth] May 29 04:09:59 angussyd sshguard[69778]: Attack from "191.8.190.32" on service 100 with danger 10. May 29 04:10:08 angussyd sshd[31261]: Unable to negotiate with 218.92.0.204 port 45019: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:11:04 angussyd sshd[56090]: Unable to negotiate with 218.92.0.204 port 13697: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:12:10 angussyd sshd[84081]: Unable to negotiate with 218.92.0.204 port 36677: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:13:24 angussyd sshd[10311]: Unable to negotiate with 218.92.0.204 port 56760: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:14:23 angussyd sshd[36201]: Unable to negotiate with 218.92.0.204 port 31542: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:15:16 angussyd sshd[63129]: Unable to negotiate with 218.92.0.204 port 57055: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:15:21 angussyd sshd[63396]: Invalid user applmgr from 54.36.165.226 port 59354 May 29 04:15:21 angussyd sshguard[69778]: Attack from "54.36.165.226" on service 100 with danger 10. May 29 04:15:21 angussyd sshd[63396]: user NOUSER login class [preauth] May 29 04:15:21 angussyd sshd[63396]: Received disconnect from 54.36.165.226 port 59354:11: Normal Shutdown, Thank you for playing [preauth] May 29 04:15:21 angussyd sshd[63396]: Disconnected from invalid user applmgr 54.36.165.226 port 59354 [preauth] May 29 04:15:21 angussyd sshguard[69778]: Attack from "54.36.165.226" on service 100 with danger 10. May 29 04:16:10 angussyd sshd[88560]: Unable to negotiate with 218.92.0.204 port 16959: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:17:03 angussyd sshd[13144]: Unable to negotiate with 218.92.0.204 port 26942: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:17:55 angussyd sshd[13613]: Unable to negotiate with 218.92.0.204 port 30559: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:18:49 angussyd sshd[38329]: Unable to negotiate with 218.92.0.204 port 44266: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:19:44 angussyd sshd[65001]: Unable to negotiate with 218.92.0.204 port 56785: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:20:14 angussyd sshd[91272]: Connection closed by 142.93.85.35 port 55294 [preauth] May 29 04:20:14 angussyd sshguard[69778]: Attack from "142.93.85.35" on service 100 with danger 10. May 29 04:20:39 angussyd sshd[91856]: Unable to negotiate with 218.92.0.204 port 27441: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:21:06 angussyd sshd[10042]: Connection closed by 182.254.192.206 port 40262 [preauth] May 29 04:21:06 angussyd sshguard[69778]: Attack from "182.254.192.206" on service 100 with danger 10. May 29 04:21:31 angussyd sshd[18072]: Unable to negotiate with 218.92.0.204 port 33104: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:22:19 angussyd sshd[44099]: Unable to negotiate with 218.92.0.204 port 48385: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:23:15 angussyd sshd[69746]: Unable to negotiate with 218.92.0.204 port 21915: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:24:08 angussyd sshd[70339]: Unable to negotiate with 218.92.0.204 port 34508: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:24:59 angussyd sshd[96131]: Unable to negotiate with 218.92.0.204 port 49023: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:25:51 angussyd sshd[22818]: Unable to negotiate with 218.92.0.204 port 56304: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:26:43 angussyd sshd[47998]: Unable to negotiate with 218.92.0.204 port 11304: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:27:39 angussyd sshd[74062]: Unable to negotiate with 218.92.0.204 port 46041: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:28:31 angussyd sshd[98008]: Unable to negotiate with 218.92.0.204 port 56480: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:29:25 angussyd sshd[22874]: Unable to negotiate with 218.92.0.204 port 20144: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:30:32 angussyd sshd[47618]: Unable to negotiate with 218.92.0.204 port 51152: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:30:56 angussyd sshd[47988]: Connection closed by 180.76.98.239 port 60728 [preauth] May 29 04:30:56 angussyd sshguard[69778]: Attack from "180.76.98.239" on service 100 with danger 10. May 29 04:31:33 angussyd sshd[72742]: Unable to negotiate with 218.92.0.204 port 29210: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:32:36 angussyd sshd[97960]: Unable to negotiate with 218.92.0.204 port 20850: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:33:37 angussyd sshd[24217]: Unable to negotiate with 218.92.0.204 port 26942: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:34:39 angussyd sshd[51783]: Unable to negotiate with 218.92.0.204 port 39742: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:35:44 angussyd sshd[75470]: Unable to negotiate with 218.92.0.204 port 17753: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:36:42 angussyd sshd[2001]: Unable to negotiate with 218.92.0.204 port 48496: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:37:51 angussyd sshd[26600]: Unable to negotiate with 218.92.0.204 port 36685: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:39:08 angussyd sshd[52236]: Unable to negotiate with 218.92.0.204 port 16989: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:40:20 angussyd sshd[77924]: Unable to negotiate with 218.92.0.204 port 27134: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:41:47 angussyd sshd[28052]: Unable to negotiate with 218.92.0.204 port 17337: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:42:41 angussyd sshd[53011]: Unable to negotiate with 218.92.0.204 port 37646: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:43:38 angussyd sshd[79072]: Unable to negotiate with 218.92.0.204 port 61331: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:44:35 angussyd sshd[98189]: Unable to negotiate with 218.92.0.204 port 19929: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:45:26 angussyd sshd[5853]: Unable to negotiate with 218.92.0.204 port 33454: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:46:15 angussyd sshd[31304]: Unable to negotiate with 218.92.0.204 port 47257: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:47:02 angussyd sshd[56488]: Unable to negotiate with 218.92.0.204 port 36702: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:47:54 angussyd sshd[81088]: Unable to negotiate with 218.92.0.204 port 55895: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] May 29 04:48:25 angussyd sshd[81589]: Unable to negotiate with 218.92.0.181 port 38272: no matching key excCLOGÎ…ìÍ