Last 1000 General Log Entries. (Maximum 1000) Dec 24 09:44:24 sshguard 3906 Now monitoring attacks. Dec 24 09:44:24 login 851 login on ttyv0 as root Dec 24 09:44:24 check_reload_status 397 Reloading filter Dec 24 09:44:24 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:44:24 check_reload_status 397 Syncing firewall Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:44:23 nginx 2022/12/24 09:44:23 [error] 92106#100542: send() failed (54: Connection reset by peer) Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:44:23 check_reload_status 397 Syncing firewall Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:44:23 kernel tun_wg0: link state changed to UP Dec 24 09:44:23 kernel wg0: changing name to 'tun_wg0' Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:44:23 php 41350 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:44:23 root 50864 Bootup complete Dec 24 09:44:23 kernel tun_wg0: link state changed to DOWN Dec 24 09:44:23 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:44:23 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:44:23 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:44:22 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:44:22 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:44:22 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:44:22 check_reload_status 397 Syncing firewall Dec 24 09:44:22 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:44:22 check_reload_status 397 Reloading filter Dec 24 09:44:22 php-fpm 367 /rc.start_packages: Beginning configuration backup to https://acb.netgate.com/save Dec 24 09:44:22 check_reload_status 397 Syncing firewall Dec 24 09:44:22 php-fpm 367 /rc.start_packages: Configuration Change: (system): pfBlockerNG: saving DNSBL changes Dec 24 09:44:22 kernel done. Dec 24 09:44:22 php-fpm 367 /rc.start_packages: Restarting/Starting all packages. Dec 24 09:44:22 syslogd kernel boot file is /boot/kernel/kernel Dec 24 09:44:22 syslogd exiting on signal 15 Dec 24 09:44:22 kernel done. Dec 24 09:44:22 php 419 rc.bootup: Creating rrd update script Dec 24 09:44:21 php-fpm 367 /diag_routes.php: Successful login for user 'admin' from: 192.168.0.140 (Local Database) Dec 24 09:44:19 php-fpm 368 /rc.dyndns.update: phpDynDNS (): No change in my IP address and/or 1 days has not passed. Not updating dynamic DNS entry. Dec 24 09:44:18 kernel .done. Dec 24 09:44:18 php 419 rc.bootup: The command '/usr/local/sbin/strongswanrc stop' returned exit code '1', the output was 'strongswan not running? (check /var/run/daemon-charon.pid).' Dec 24 09:44:17 kernel done. Dec 24 09:44:17 check_reload_status 397 Updating all dyndns Dec 24 09:44:17 kernel done. Dec 24 09:44:16 kernel done. Dec 24 09:44:16 php 419 rc.bootup: NTPD is starting up. Dec 24 09:44:16 sshguard 90383 Attack from "192.168.0.91" on service SSH with danger 2. Dec 24 09:44:16 sshguard 90383 Attack from "192.168.0.91" on service SSH with danger 10. Dec 24 09:44:16 sshguard 90383 Now monitoring attacks. Dec 24 09:44:16 sshd 88950 Connection closed by authenticating user admin 192.168.0.91 port 45584 [preauth] Dec 24 09:44:16 sshd 88950 error: PAM: Authentication error for admin from 192.168.0.91 Dec 24 09:44:10 kernel em1: link state changed to UP Dec 24 09:44:10 check_reload_status 397 Linkup starting em1 Dec 24 09:44:10 php-fpm 368 /rc.newwanip: Interface is disabled, nothing to do. Dec 24 09:44:10 php-fpm 368 /rc.newwanip: rc.newwanip: Info: starting on ovpns1. Dec 24 09:44:09 kernel done. Dec 24 09:44:09 php 419 rc.bootup: sync unbound done. Dec 24 09:44:09 kernel done. Dec 24 09:44:09 kernel done. Dec 24 09:44:09 php 419 rc.bootup: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:44:09 php 419 rc.bootup: Default gateway setting Interface WAN_DHCP Gateway as default. Dec 24 09:44:09 kernel .done. Dec 24 09:44:09 kernel .... Dec 24 09:44:08 check_reload_status 397 rc.newwanip starting ovpns1 Dec 24 09:44:08 kernel pflog0: promiscuous mode enabled Dec 24 09:44:08 kernel ovpns1: link state changed to UP Dec 24 09:44:08 kernel tun1: changing name to 'ovpns1' Dec 24 09:44:08 php 419 rc.bootup: Resyncing OpenVPN instances. Dec 24 09:44:08 kernel done. Dec 24 09:44:08 php-fpm 368 /rc.newwanip: rc.newwanip: on (IP address: 47.185.169.177) (interface: WAN[wan]) (real interface: em0). Dec 24 09:44:08 php-fpm 368 /rc.newwanip: rc.newwanip: Info: starting on em0. Dec 24 09:44:07 check_reload_status 397 rc.newwanip starting em0 Dec 24 09:44:06 check_reload_status 397 Linkup starting em0.13 Dec 24 09:44:06 check_reload_status 397 Linkup starting em0.12 Dec 24 09:44:06 check_reload_status 397 Linkup starting em0.11 Dec 24 09:44:06 check_reload_status 397 Linkup starting em0.10 Dec 24 09:44:06 check_reload_status 397 Linkup starting em0 Dec 24 09:44:06 kernel em0.13: link state changed to UP Dec 24 09:44:06 kernel em0.12: link state changed to UP Dec 24 09:44:06 kernel em0.11: link state changed to UP Dec 24 09:44:06 kernel em0.10: link state changed to UP Dec 24 09:44:06 kernel em0: link state changed to UP Dec 24 09:44:05 kernel vlan3: changing name to 'em0.13' Dec 24 09:44:05 kernel vlan2: changing name to 'em0.12' Dec 24 09:44:05 kernel vlan1: changing name to 'em0.11' Dec 24 09:44:05 kernel vlan0: changing name to 'em0.10' Dec 24 09:44:04 sshguard 9481 Now monitoring attacks. Dec 24 09:44:04 sshd 8619 Server listening on 0.0.0.0 port 22. Dec 24 09:44:04 sshd 8619 Server listening on :: port 22. Dec 24 09:44:03 kernel lo0: link state changed to UP Dec 24 09:44:03 kernel tun_wg0: link state changed to UP Dec 24 09:44:03 kernel wg0: changing name to 'tun_wg0' Dec 24 09:44:03 kernel smbus0: on intsmb0 Dec 24 09:44:03 kernel intsmb0: intr IRQ 9 enabled revision 0 Dec 24 09:44:03 kernel intsmb0: irq 23 at device 7.0 on pci0 Dec 24 09:44:03 kernel TSC: P-state invariant Dec 24 09:44:03 kernel Structured Extended Features3=0x10000400 Dec 24 09:44:03 kernel Structured Extended Features=0x842529 Dec 24 09:44:03 kernel AMD Features2=0x121 Dec 24 09:44:03 kernel AMD Features=0x28100800 Dec 24 09:44:03 kernel Features2=0x5eda2203 Dec 24 09:44:03 kernel Features=0x178bfbff Dec 24 09:44:03 kernel Origin="GenuineIntel" Id=0x906e9 Family=0x6 Model=0x9e Stepping=9 Dec 24 09:44:03 kernel CPU: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz (4200.09-MHz K8-class CPU) Dec 24 09:44:03 kernel ada0: 8192MB (16777216 512 byte sectors) Dec 24 09:44:03 kernel ada0: 33.300MB/s transfers (UDMA2, PIO 65536bytes) Dec 24 09:44:03 kernel ada0: Serial Number VB5f9e7f89-df559544 Dec 24 09:44:03 kernel ada0: ATA-6 device Dec 24 09:44:03 kernel ada0 at ata0 bus 0 scbus0 target 0 lun 0 Dec 24 09:44:03 kernel Root mount waiting for: CAM Dec 24 09:44:03 kernel Root mount waiting for: CAM Dec 24 09:44:03 kernel Root mount waiting for: CAM Dec 24 09:44:03 kernel Root mount waiting for: CAM Dec 24 09:44:03 kernel Root mount waiting for: CAM Dec 24 09:44:03 kernel Root mount waiting for: CAM Dec 24 09:44:03 kernel Root mount waiting for: CAM Dec 24 09:44:03 kernel Root mount waiting for: CAM Dec 24 09:44:03 kernel Root mount waiting for: CAM Dec 24 09:44:03 kernel Root mount waiting for: CAM Dec 24 09:44:03 kernel Trying to mount root from zfs:pfSense/ROOT/default []... Dec 24 09:44:03 kernel Timecounters tick every 10.000 msec Dec 24 09:44:03 kernel ZFS storage pool version: features support (5000) Dec 24 09:44:03 kernel ZFS filesystem version: 5 Dec 24 09:44:03 kernel to enable, add "vfs.zfs.prefetch_disable=0" to /boot/loader.conf. Dec 24 09:44:03 kernel ZFS NOTICE: Prefetch is disabled by default if less than 4GB of RAM is present; Dec 24 09:44:03 kernel Event timer "RTC" frequency 32768 Hz quality 0 Dec 24 09:44:03 kernel atrtc0: registered as a time-of-day clock, resolution 1.000000s Dec 24 09:44:03 kernel atrtc0: at port 0x70 irq 8 on isa0 Dec 24 09:44:03 kernel vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff pnpid PNP0900 on isa0 Dec 24 09:44:03 kernel orm0: at iomem 0xc0000-0xc7fff,0xe2000-0xeffff pnpid ORM0000 on isa0 Dec 24 09:44:03 kernel psm0: model IntelliMouse Explorer, device ID 4 Dec 24 09:44:03 kernel WARNING: Device "psm" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:44:03 kernel psm0: [GIANT-LOCKED] Dec 24 09:44:03 kernel psm0: irq 12 on atkbdc0 Dec 24 09:44:03 kernel atkbd0: [GIANT-LOCKED] Dec 24 09:44:03 kernel kbd0 at atkbd0 Dec 24 09:44:03 kernel atkbd0: irq 1 on atkbdc0 Dec 24 09:44:03 kernel atkbdc0: port 0x60,0x64 irq 1 on acpi0 Dec 24 09:44:03 kernel acpi_acad0: on acpi0 Dec 24 09:44:03 kernel em1: netmap queues/slots: TX 1/1024, RX 1/1024 Dec 24 09:44:03 kernel em1: Ethernet address: 08:00:27:ac:88:65 Dec 24 09:44:03 kernel em1: Using 1024 TX descriptors and 1024 RX descriptors Dec 24 09:44:03 kernel em1: port 0xd240-0xd247 mem 0xf0820000-0xf083ffff irq 16 at device 8.0 on pci0 Dec 24 09:44:03 kernel pci0: at device 7.0 (no driver attached) Dec 24 09:44:03 kernel pcm0: Dec 24 09:44:03 kernel pcm0: port 0xd100-0xd1ff,0xd200-0xd23f irq 21 at device 5.0 on pci0 Dec 24 09:44:03 kernel em0: netmap queues/slots: TX 1/1024, RX 1/1024 Dec 24 09:44:03 kernel em0: Ethernet address: 08:00:27:98:9a:b5 Dec 24 09:44:03 kernel em0: Using 1024 TX descriptors and 1024 RX descriptors Dec 24 09:44:03 kernel em0: port 0xd020-0xd027 mem 0xf0200000-0xf021ffff irq 19 at device 3.0 on pci0 Dec 24 09:44:03 kernel vgapci0: Boot video device Dec 24 09:44:03 kernel vgapci0: port 0xd010-0xd01f mem 0xe0000000-0xe3ffffff,0xf0000000-0xf01fffff irq 18 at device 2.0 on pci0 Dec 24 09:44:03 kernel ata1: at channel 1 on atapci0 Dec 24 09:44:03 kernel ata0: at channel 0 on atapci0 Dec 24 09:44:03 kernel atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xd000-0xd00f at device 1.1 on pci0 Dec 24 09:44:03 kernel isa0: on isab0 Dec 24 09:44:03 kernel isab0: at device 1.0 on pci0 Dec 24 09:44:03 kernel pci0: on pcib0 Dec 24 09:44:03 kernel pcib0: port 0xcf8-0xcff on acpi0 Dec 24 09:44:03 kernel acpi_timer0: <32-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0 Dec 24 09:44:03 kernel Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 Dec 24 09:44:03 kernel Event timer "i8254" frequency 1193182 Hz quality 100 Dec 24 09:44:03 kernel Timecounter "i8254" frequency 1193182 Hz quality 0 Dec 24 09:44:03 kernel attimer0: port 0x40-0x43,0x50-0x53 on acpi0 Dec 24 09:44:03 kernel cpu0: on acpi0 Dec 24 09:44:03 kernel acpi0: Sleep Button (fixed) Dec 24 09:44:03 kernel acpi0: Power Button (fixed) Dec 24 09:44:03 kernel acpi0: on motherboard Dec 24 09:44:03 kernel cryptosoft0: on motherboard Dec 24 09:44:03 kernel vtvga0: on motherboard Dec 24 09:44:03 kernel nexus0 Dec 24 09:44:03 kernel mlx5en: Mellanox Ethernet driver 3.6.0 (December 2020) Dec 24 09:44:03 kernel 000.000056 [4344] netmap_init netmap: loaded module Dec 24 09:44:03 kernel WARNING: Device "spkr" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:44:03 kernel random: fast provider: "Intel Secure Key RNG" Dec 24 09:44:03 kernel random: registering fast source Intel Secure Key RNG Dec 24 09:44:03 kernel [ath_hal] loaded Dec 24 09:44:03 kernel kbd1 at kbdmux0 Dec 24 09:44:03 kernel WARNING: Device "kbd" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:44:03 kernel module_register_init: MOD_LOAD (vesa, 0xffffffff8140a210, 0) error 19 Dec 24 09:44:03 kernel WARNING: Device "pci" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:44:03 kernel WARNING: Device "g_ctl" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:44:03 kernel wlan: mac acl policy registered Dec 24 09:44:03 kernel module_register_init: MOD_LOAD (iwi_monitor_fw, 0xffffffff80760b50, 0) error 1 Dec 24 09:44:03 kernel iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:44:03 kernel iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:44:03 kernel module_register_init: MOD_LOAD (iwi_ibss_fw, 0xffffffff80760aa0, 0) error 1 Dec 24 09:44:03 kernel iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:44:03 kernel iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:44:03 kernel module_register_init: MOD_LOAD (iwi_bss_fw, 0xffffffff807609f0, 0) error 1 Dec 24 09:44:03 kernel iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:44:03 kernel iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:44:03 kernel module_register_init: MOD_LOAD (ipw_monitor_fw, 0xffffffff80739160, 0) error 1 Dec 24 09:44:03 kernel ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:44:03 kernel ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:44:03 kernel module_register_init: MOD_LOAD (ipw_ibss_fw, 0xffffffff807390b0, 0) error 1 Dec 24 09:44:03 kernel ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:44:03 kernel ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:44:03 kernel module_register_init: MOD_LOAD (ipw_bss_fw, 0xffffffff80739000, 0) error 1 Dec 24 09:44:03 kernel ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:44:03 kernel ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:44:03 kernel random: entropy device external interface Dec 24 09:44:03 kernel Launching APs: 1 3 2 Dec 24 09:44:03 kernel ioapic0 irqs 0-23 on motherboard Dec 24 09:44:03 kernel ioapic0: MADT APIC ID 4 != hw id 0 Dec 24 09:44:03 kernel random: unblocking device. Dec 24 09:44:03 kernel FreeBSD/SMP: 1 package(s) x 4 cache groups x 1 core(s) Dec 24 09:44:03 kernel FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs Dec 24 09:44:03 kernel ACPI APIC Table: Dec 24 09:44:03 kernel Event timer "LAPIC" quality 100 Dec 24 09:44:03 kernel avail memory = 2014822400 (1921 MB) Dec 24 09:44:03 kernel real memory = 2147418112 (2047 MB) Dec 24 09:44:03 kernel TSC: P-state invariant Dec 24 09:44:03 kernel Structured Extended Features3=0x10000400 Dec 24 09:44:03 kernel Structured Extended Features=0x842529 Dec 24 09:44:03 kernel AMD Features2=0x121 Dec 24 09:44:03 kernel AMD Features=0x28100800 Dec 24 09:44:03 kernel Features2=0x5eda2203 Dec 24 09:44:03 kernel Features=0x1783fbff Dec 24 09:44:03 kernel Origin="GenuineIntel" Id=0x906e9 Family=0x6 Model=0x9e Stepping=9 Dec 24 09:44:03 kernel CPU: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz (4200.09-MHz K8-class CPU) Dec 24 09:44:03 kernel VT(vga): text 80x25 Dec 24 09:44:03 kernel FreeBSD clang version 10.0.1 (git@github.com:llvm/llvm-project.git llvmorg-10.0.1-0-gef32c611aa2) Dec 24 09:44:03 kernel FreeBSD 12.3-STABLE RELENG_2_6_0-n226742-1285d6d205f pfSense amd64 Dec 24 09:44:03 kernel FreeBSD is a registered trademark of The FreeBSD Foundation. Dec 24 09:44:03 kernel The Regents of the University of California. All rights reserved. Dec 24 09:44:03 kernel Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 Dec 24 09:44:03 kernel Copyright (c) 1992-2021 The FreeBSD Project. Dec 24 09:44:03 kernel ---<>--- Dec 24 09:44:03 syslogd kernel boot file is /boot/kernel/kernel Dec 24 09:43:23 syslogd exiting on signal 15 Dec 24 09:43:23 reboot 31726 rebooted by root Dec 24 09:43:21 php_pfb 27841 [pfBlockerNG] filterlog daemon stopped Dec 24 09:43:21 tail_pfb 27537 [pfBlockerNG] Firewall Filter Service stopped Dec 24 09:43:21 lighttpd_pfb 26359 [pfBlockerNG] DNSBL Webserver stopped Dec 24 09:43:21 php 89602 rc.initial.reboot: The command '/usr/local/etc/rc.d/wireguardd stop' returned exit code '1', the output was '' Dec 24 09:42:27 php-fpm 368 /rc.dyndns.update: phpDynDNS (): No change in my IP address and/or 1 days has not passed. Not updating dynamic DNS entry. Dec 24 09:42:27 php-fpm 369 /rc.openvpn: OpenVPN: One or more OpenVPN tunnel endpoints may have changed its IP. Reloading endpoints that may use WAN_DHCP. Dec 24 09:42:27 php-fpm 369 /rc.openvpn: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:42:26 check_reload_status 398 Reloading filter Dec 24 09:42:26 check_reload_status 398 Restarting OpenVPN tunnels/interfaces Dec 24 09:42:26 check_reload_status 398 Restarting IPsec tunnels Dec 24 09:42:26 check_reload_status 398 updating dyndns WAN_DHCP Dec 24 09:42:26 rc.gateway_alarm 6801 >>> Gateway alarm: WAN_DHCP (Addr:47.185.169.1 Alarm:1 RTT:0.000ms RTTsd:0.000ms Loss:100%) Dec 24 09:42:24 kernel tun_wg0: link state changed to DOWN Dec 24 09:42:24 php 89602 rc.initial.reboot: Stopping all packages. Dec 24 09:41:37 php-fpm 369 /rc.dyndns.update: phpDynDNS (): No change in my IP address and/or 1 days has not passed. Not updating dynamic DNS entry. Dec 24 09:41:37 php-fpm 368 /rc.openvpn: OpenVPN: One or more OpenVPN tunnel endpoints may have changed its IP. Reloading endpoints that may use WAN_DHCP. Dec 24 09:41:37 php-fpm 368 /rc.openvpn: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:41:36 check_reload_status 398 Reloading filter Dec 24 09:41:36 check_reload_status 398 Restarting OpenVPN tunnels/interfaces Dec 24 09:41:36 check_reload_status 398 Restarting IPsec tunnels Dec 24 09:41:36 check_reload_status 398 updating dyndns WAN_DHCP Dec 24 09:41:36 rc.gateway_alarm 77379 >>> Gateway alarm: WAN_DHCP (Addr:47.185.169.1 Alarm:1 RTT:2.661ms RTTsd:1.839ms Loss:21%) Dec 24 09:41:16 sshguard 42634 Attack from "192.168.0.91" on service SSH with danger 2. Dec 24 09:41:16 sshd 71494 Connection closed by authenticating user admin 192.168.0.91 port 39966 [preauth] Dec 24 09:41:16 sshguard 42634 Attack from "192.168.0.91" on service SSH with danger 10. Dec 24 09:41:16 sshd 71494 error: PAM: Authentication error for admin from 192.168.0.91 Dec 24 09:40:58 nginx 2022/12/24 09:40:58 [error] 93764#100547: send() failed (54: Connection reset by peer) Dec 24 09:40:58 php-fpm 368 /index.php: Successful login for user 'admin' from: 192.168.0.140 (Local Database) Dec 24 09:40:46 sshguard 42634 Attack from "192.168.0.91" on service SSH with danger 2. Dec 24 09:40:46 sshd 55893 Connection closed by authenticating user admin 192.168.0.91 port 59520 [preauth] Dec 24 09:40:46 sshguard 42634 Attack from "192.168.0.91" on service SSH with danger 10. Dec 24 09:40:46 sshd 55893 error: PAM: Authentication error for admin from 192.168.0.91 Dec 24 09:40:45 sshguard 42634 Now monitoring attacks. Dec 24 09:40:45 login 39639 login on ttyv0 as root Dec 24 09:40:45 check_reload_status 398 Reloading filter Dec 24 09:40:45 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:40:45 check_reload_status 398 Syncing firewall Dec 24 09:40:45 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:40:45 check_reload_status 398 Syncing firewall Dec 24 09:40:45 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:40:45 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:40:45 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:40:45 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:40:45 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:40:45 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:40:44 kernel tun_wg0: link state changed to UP Dec 24 09:40:44 kernel wg0: changing name to 'tun_wg0' Dec 24 09:40:44 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:40:44 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:40:44 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:40:44 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:40:44 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:40:44 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:40:44 php 20440 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:40:44 root 24791 Bootup complete Dec 24 09:40:44 kernel tun_wg0: link state changed to DOWN Dec 24 09:40:44 php-fpm 368 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:40:44 php-fpm 368 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:40:44 php-fpm 368 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:40:44 php-fpm 368 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:40:44 php-fpm 368 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:40:44 php-fpm 368 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:40:44 check_reload_status 398 Syncing firewall Dec 24 09:40:44 php-fpm 368 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:40:44 check_reload_status 398 Reloading filter Dec 24 09:40:44 php-fpm 368 /rc.start_packages: Beginning configuration backup to https://acb.netgate.com/save Dec 24 09:40:44 check_reload_status 398 Syncing firewall Dec 24 09:40:44 php-fpm 368 /rc.start_packages: Configuration Change: (system): pfBlockerNG: saving DNSBL changes Dec 24 09:40:43 kernel done. Dec 24 09:40:43 php-fpm 368 /rc.start_packages: Restarting/Starting all packages. Dec 24 09:40:43 kernel done. Dec 24 09:40:43 syslogd kernel boot file is /boot/kernel/kernel Dec 24 09:40:43 syslogd exiting on signal 15 Dec 24 09:40:43 php 420 rc.bootup: Creating rrd update script Dec 24 09:40:40 php-fpm 369 /rc.dyndns.update: phpDynDNS (): No change in my IP address and/or 1 days has not passed. Not updating dynamic DNS entry. Dec 24 09:40:39 kernel .done. Dec 24 09:40:39 php 420 rc.bootup: The command '/usr/local/sbin/strongswanrc stop' returned exit code '1', the output was 'strongswan not running? (check /var/run/daemon-charon.pid).' Dec 24 09:40:39 kernel .... Dec 24 09:40:39 kernel done. Dec 24 09:40:39 check_reload_status 398 Updating all dyndns Dec 24 09:40:39 kernel done. Dec 24 09:40:38 kernel done. Dec 24 09:40:38 php 420 rc.bootup: NTPD is starting up. Dec 24 09:37:09 kernel em1: link state changed to UP Dec 24 09:37:09 check_reload_status 398 Linkup starting em1 Dec 24 09:37:09 php-fpm 369 /rc.newwanip: Interface is disabled, nothing to do. Dec 24 09:37:09 php-fpm 369 /rc.newwanip: rc.newwanip: Info: starting on ovpns1. Dec 24 09:37:09 kernel done. Dec 24 09:37:09 kernel done. Dec 24 09:37:09 php 420 rc.bootup: sync unbound done. Dec 24 09:37:09 kernel done. Dec 24 09:37:09 php 420 rc.bootup: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:37:09 php 420 rc.bootup: Default gateway setting Interface WAN_DHCP Gateway as default. Dec 24 09:37:08 check_reload_status 398 rc.newwanip starting ovpns1 Dec 24 09:37:08 kernel pflog0: promiscuous mode enabled Dec 24 09:37:08 kernel ovpns1: link state changed to UP Dec 24 09:37:08 kernel tun1: changing name to 'ovpns1' Dec 24 09:37:08 kernel done. Dec 24 09:37:08 php 420 rc.bootup: Resyncing OpenVPN instances. Dec 24 09:37:08 php-fpm 369 /rc.newwanip: rc.newwanip: on (IP address: 47.185.169.177) (interface: WAN[wan]) (real interface: em0). Dec 24 09:37:08 php-fpm 369 /rc.newwanip: rc.newwanip: Info: starting on em0. Dec 24 09:37:07 check_reload_status 398 rc.newwanip starting em0 Dec 24 09:37:06 check_reload_status 398 Linkup starting em0.13 Dec 24 09:37:06 check_reload_status 398 Linkup starting em0.12 Dec 24 09:37:06 check_reload_status 398 Linkup starting em0.11 Dec 24 09:37:06 check_reload_status 398 Linkup starting em0.10 Dec 24 09:37:06 kernel em0.13: link state changed to UP Dec 24 09:37:06 kernel em0.12: link state changed to UP Dec 24 09:37:06 kernel em0.11: link state changed to UP Dec 24 09:37:06 kernel em0.10: link state changed to UP Dec 24 09:37:06 kernel em0: link state changed to UP Dec 24 09:37:06 check_reload_status 398 Linkup starting em0 Dec 24 09:37:04 kernel vlan3: changing name to 'em0.13' Dec 24 09:37:04 kernel vlan2: changing name to 'em0.12' Dec 24 09:37:04 kernel vlan1: changing name to 'em0.11' Dec 24 09:37:04 kernel vlan0: changing name to 'em0.10' Dec 24 09:37:04 sshguard 8497 Now monitoring attacks. Dec 24 09:37:04 sshd 8054 Server listening on 0.0.0.0 port 22. Dec 24 09:37:04 sshd 8054 Server listening on :: port 22. Dec 24 09:37:03 kernel lo0: link state changed to UP Dec 24 09:37:03 kernel tun_wg0: link state changed to UP Dec 24 09:37:03 kernel wg0: changing name to 'tun_wg0' Dec 24 09:37:03 kernel smbus0: on intsmb0 Dec 24 09:37:03 kernel intsmb0: intr IRQ 9 enabled revision 0 Dec 24 09:37:03 kernel intsmb0: irq 23 at device 7.0 on pci0 Dec 24 09:37:03 kernel TSC: P-state invariant Dec 24 09:37:03 kernel Structured Extended Features3=0x10000400 Dec 24 09:37:03 kernel Structured Extended Features=0x842529 Dec 24 09:37:03 kernel AMD Features2=0x121 Dec 24 09:37:03 kernel AMD Features=0x28100800 Dec 24 09:37:03 kernel Features2=0x5eda2203 Dec 24 09:37:03 kernel Features=0x178bfbff Dec 24 09:37:03 kernel Origin="GenuineIntel" Id=0x906e9 Family=0x6 Model=0x9e Stepping=9 Dec 24 09:37:03 kernel CPU: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz (4200.08-MHz K8-class CPU) Dec 24 09:37:03 kernel ada0: 8192MB (16777216 512 byte sectors) Dec 24 09:37:03 kernel ada0: 33.300MB/s transfers (UDMA2, PIO 65536bytes) Dec 24 09:37:03 kernel ada0: Serial Number VB5f9e7f89-df559544 Dec 24 09:37:03 kernel ada0: ATA-6 device Dec 24 09:37:03 kernel ada0 at ata0 bus 0 scbus0 target 0 lun 0 Dec 24 09:37:03 kernel Root mount waiting for: CAM Dec 24 09:37:03 kernel Root mount waiting for: CAM Dec 24 09:37:03 kernel Root mount waiting for: CAM Dec 24 09:37:03 kernel Root mount waiting for: CAM Dec 24 09:37:03 kernel Root mount waiting for: CAM Dec 24 09:37:03 kernel Root mount waiting for: CAM Dec 24 09:37:03 kernel Root mount waiting for: CAM Dec 24 09:37:03 kernel Root mount waiting for: CAM Dec 24 09:37:03 kernel Root mount waiting for: CAM Dec 24 09:37:03 kernel Root mount waiting for: CAM Dec 24 09:37:03 kernel Trying to mount root from zfs:pfSense/ROOT/default []... Dec 24 09:37:03 kernel pcm0: measured ac97 link rate at 46740 Hz Dec 24 09:37:03 kernel Timecounters tick every 10.000 msec Dec 24 09:37:03 kernel ZFS storage pool version: features support (5000) Dec 24 09:37:03 kernel ZFS filesystem version: 5 Dec 24 09:37:03 kernel to enable, add "vfs.zfs.prefetch_disable=0" to /boot/loader.conf. Dec 24 09:37:03 kernel ZFS NOTICE: Prefetch is disabled by default if less than 4GB of RAM is present; Dec 24 09:37:03 kernel Event timer "RTC" frequency 32768 Hz quality 0 Dec 24 09:37:03 kernel atrtc0: registered as a time-of-day clock, resolution 1.000000s Dec 24 09:37:03 kernel atrtc0: at port 0x70 irq 8 on isa0 Dec 24 09:37:03 kernel vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff pnpid PNP0900 on isa0 Dec 24 09:37:03 kernel orm0: at iomem 0xc0000-0xc7fff,0xe2000-0xeffff pnpid ORM0000 on isa0 Dec 24 09:37:03 kernel psm0: model IntelliMouse Explorer, device ID 4 Dec 24 09:37:03 kernel WARNING: Device "psm" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:37:03 kernel psm0: [GIANT-LOCKED] Dec 24 09:37:03 kernel psm0: irq 12 on atkbdc0 Dec 24 09:37:03 kernel atkbd0: [GIANT-LOCKED] Dec 24 09:37:03 kernel kbd0 at atkbd0 Dec 24 09:37:03 kernel atkbd0: irq 1 on atkbdc0 Dec 24 09:37:03 kernel atkbdc0: port 0x60,0x64 irq 1 on acpi0 Dec 24 09:37:03 kernel acpi_acad0: on acpi0 Dec 24 09:37:03 kernel em1: netmap queues/slots: TX 1/1024, RX 1/1024 Dec 24 09:37:03 kernel em1: Ethernet address: 08:00:27:ac:88:65 Dec 24 09:37:03 kernel em1: Using 1024 TX descriptors and 1024 RX descriptors Dec 24 09:37:03 kernel em1: port 0xd240-0xd247 mem 0xf0820000-0xf083ffff irq 16 at device 8.0 on pci0 Dec 24 09:37:03 kernel pci0: at device 7.0 (no driver attached) Dec 24 09:37:03 kernel pcm0: Dec 24 09:37:03 kernel pcm0: port 0xd100-0xd1ff,0xd200-0xd23f irq 21 at device 5.0 on pci0 Dec 24 09:37:03 kernel em0: netmap queues/slots: TX 1/1024, RX 1/1024 Dec 24 09:37:03 kernel em0: Ethernet address: 08:00:27:98:9a:b5 Dec 24 09:37:03 kernel em0: Using 1024 TX descriptors and 1024 RX descriptors Dec 24 09:37:03 kernel em0: port 0xd020-0xd027 mem 0xf0200000-0xf021ffff irq 19 at device 3.0 on pci0 Dec 24 09:37:03 kernel vgapci0: Boot video device Dec 24 09:37:03 kernel vgapci0: port 0xd010-0xd01f mem 0xe0000000-0xe3ffffff,0xf0000000-0xf01fffff irq 18 at device 2.0 on pci0 Dec 24 09:37:03 kernel ata1: at channel 1 on atapci0 Dec 24 09:37:03 kernel ata0: at channel 0 on atapci0 Dec 24 09:37:03 kernel atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xd000-0xd00f at device 1.1 on pci0 Dec 24 09:37:03 kernel isa0: on isab0 Dec 24 09:37:03 kernel isab0: at device 1.0 on pci0 Dec 24 09:37:03 kernel pci0: on pcib0 Dec 24 09:37:03 kernel pcib0: port 0xcf8-0xcff on acpi0 Dec 24 09:37:03 kernel acpi_timer0: <32-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0 Dec 24 09:37:03 kernel Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 Dec 24 09:37:03 kernel Event timer "i8254" frequency 1193182 Hz quality 100 Dec 24 09:37:03 kernel Timecounter "i8254" frequency 1193182 Hz quality 0 Dec 24 09:37:03 kernel attimer0: port 0x40-0x43,0x50-0x53 on acpi0 Dec 24 09:37:03 kernel cpu0: on acpi0 Dec 24 09:37:03 kernel acpi0: Sleep Button (fixed) Dec 24 09:37:03 kernel acpi0: Power Button (fixed) Dec 24 09:37:03 kernel acpi0: on motherboard Dec 24 09:37:03 kernel cryptosoft0: on motherboard Dec 24 09:37:03 kernel vtvga0: on motherboard Dec 24 09:37:03 kernel nexus0 Dec 24 09:37:03 kernel mlx5en: Mellanox Ethernet driver 3.6.0 (December 2020) Dec 24 09:37:03 kernel 000.000056 [4344] netmap_init netmap: loaded module Dec 24 09:37:03 kernel WARNING: Device "spkr" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:37:03 kernel random: fast provider: "Intel Secure Key RNG" Dec 24 09:37:03 kernel random: registering fast source Intel Secure Key RNG Dec 24 09:37:03 kernel [ath_hal] loaded Dec 24 09:37:03 kernel kbd1 at kbdmux0 Dec 24 09:37:03 kernel WARNING: Device "kbd" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:37:03 kernel module_register_init: MOD_LOAD (vesa, 0xffffffff8140a210, 0) error 19 Dec 24 09:37:03 kernel WARNING: Device "pci" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:37:03 kernel WARNING: Device "g_ctl" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:37:03 kernel wlan: mac acl policy registered Dec 24 09:37:03 kernel module_register_init: MOD_LOAD (iwi_monitor_fw, 0xffffffff80760b50, 0) error 1 Dec 24 09:37:03 kernel iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:37:03 kernel iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:37:03 kernel module_register_init: MOD_LOAD (iwi_ibss_fw, 0xffffffff80760aa0, 0) error 1 Dec 24 09:37:03 kernel iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:37:03 kernel iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:37:03 kernel module_register_init: MOD_LOAD (iwi_bss_fw, 0xffffffff807609f0, 0) error 1 Dec 24 09:37:03 kernel iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:37:03 kernel iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:37:03 kernel module_register_init: MOD_LOAD (ipw_monitor_fw, 0xffffffff80739160, 0) error 1 Dec 24 09:37:03 kernel ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:37:03 kernel ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:37:03 kernel module_register_init: MOD_LOAD (ipw_ibss_fw, 0xffffffff807390b0, 0) error 1 Dec 24 09:37:03 kernel ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:37:03 kernel ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:37:03 kernel module_register_init: MOD_LOAD (ipw_bss_fw, 0xffffffff80739000, 0) error 1 Dec 24 09:37:03 kernel ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:37:03 kernel ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:37:03 kernel random: entropy device external interface Dec 24 09:37:03 kernel Launching APs: 3 2 1 Dec 24 09:37:03 kernel ioapic0 irqs 0-23 on motherboard Dec 24 09:37:03 kernel ioapic0: MADT APIC ID 4 != hw id 0 Dec 24 09:37:03 kernel random: unblocking device. Dec 24 09:37:03 kernel FreeBSD/SMP: 1 package(s) x 4 cache groups x 1 core(s) Dec 24 09:37:03 kernel FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs Dec 24 09:37:03 kernel ACPI APIC Table: Dec 24 09:37:03 kernel Event timer "LAPIC" quality 100 Dec 24 09:37:03 kernel avail memory = 2014822400 (1921 MB) Dec 24 09:37:03 kernel real memory = 2147418112 (2047 MB) Dec 24 09:37:03 kernel TSC: P-state invariant Dec 24 09:37:03 kernel Structured Extended Features3=0x10000400 Dec 24 09:37:03 kernel Structured Extended Features=0x842529 Dec 24 09:37:03 kernel AMD Features2=0x121 Dec 24 09:37:03 kernel AMD Features=0x28100800 Dec 24 09:37:03 kernel Features2=0x5eda2203 Dec 24 09:37:03 kernel Features=0x1783fbff Dec 24 09:37:03 kernel Origin="GenuineIntel" Id=0x906e9 Family=0x6 Model=0x9e Stepping=9 Dec 24 09:37:03 kernel CPU: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz (4200.08-MHz K8-class CPU) Dec 24 09:37:03 kernel VT(vga): text 80x25 Dec 24 09:37:03 kernel FreeBSD clang version 10.0.1 (git@github.com:llvm/llvm-project.git llvmorg-10.0.1-0-gef32c611aa2) Dec 24 09:37:03 kernel FreeBSD 12.3-STABLE RELENG_2_6_0-n226742-1285d6d205f pfSense amd64 Dec 24 09:37:03 kernel FreeBSD is a registered trademark of The FreeBSD Foundation. Dec 24 09:37:03 kernel The Regents of the University of California. All rights reserved. Dec 24 09:37:03 kernel Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 Dec 24 09:37:03 kernel Copyright (c) 1992-2021 The FreeBSD Project. Dec 24 09:37:03 kernel ---<>--- Dec 24 09:37:03 syslogd kernel boot file is /boot/kernel/kernel Dec 24 09:37:06 syslogd exiting on signal 15 Dec 24 09:36:51 php 27501 /usr/local/sbin/acbupload.php: End of configuration backup to https://acb.netgate.com/save (success). Dec 24 09:35:44 php 60815 rc.initial.setlanip: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:35:44 php 60815 rc.initial.setlanip: Beginning configuration backup to https://acb.netgate.com/save Dec 24 09:35:44 check_reload_status 51267 Syncing firewall Dec 24 09:35:44 php 60815 rc.initial.setlanip: Configuration Change: (system): lan IP configuration from console menu Dec 24 09:34:46 check_reload_status 51267 check_reload_status is starting. Dec 24 09:34:46 rc.php-fpm_restart 50166 >>> Restarting php-fpm Dec 24 09:33:13 php 59642 rc.restart_webgui: Creating rrd update script Dec 24 09:26:47 php-fpm 368 /rc.dyndns.update: phpDynDNS (): No change in my IP address and/or 1 days has not passed. Not updating dynamic DNS entry. Dec 24 09:26:47 php-fpm 367 /rc.openvpn: OpenVPN: One or more OpenVPN tunnel endpoints may have changed its IP. Reloading endpoints that may use WAN_DHCP. Dec 24 09:26:47 php-fpm 367 /rc.openvpn: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:26:46 check_reload_status 397 Reloading filter Dec 24 09:26:46 check_reload_status 397 Restarting OpenVPN tunnels/interfaces Dec 24 09:26:46 check_reload_status 397 Restarting IPsec tunnels Dec 24 09:26:46 check_reload_status 397 updating dyndns WAN_DHCP Dec 24 09:26:46 rc.gateway_alarm 63611 >>> Gateway alarm: WAN_DHCP (Addr:47.185.169.1 Alarm:1 RTT:2.967ms RTTsd:1.862ms Loss:22%) Dec 24 09:26:16 sshguard 41691 Attack from "192.168.0.91" on service SSH with danger 2. Dec 24 09:26:16 sshd 48143 Connection closed by authenticating user admin 192.168.0.91 port 45150 [preauth] Dec 24 09:26:16 sshguard 41691 Attack from "192.168.0.91" on service SSH with danger 10. Dec 24 09:26:16 sshd 48143 error: PAM: Authentication error for admin from 192.168.0.91 Dec 24 09:26:12 nginx 2022/12/24 09:26:12 [error] 92336#100534: send() failed (54: Connection reset by peer) Dec 24 09:26:12 php-fpm 367 /index.php: Successful login for user 'admin' from: 192.168.0.140 (Local Database) Dec 24 09:26:10 sshguard 41691 Now monitoring attacks. Dec 24 09:26:10 login 39105 login on ttyv0 as root Dec 24 09:26:09 check_reload_status 397 Reloading filter Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:26:09 kernel tun_wg0: link state changed to UP Dec 24 09:26:09 kernel wg0: changing name to 'tun_wg0' Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:26:09 php 18479 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:26:09 root 22017 Bootup complete Dec 24 09:26:09 kernel tun_wg0: link state changed to DOWN Dec 24 09:26:09 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:26:09 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:26:08 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:26:08 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:26:08 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:26:08 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:26:08 check_reload_status 397 Syncing firewall Dec 24 09:26:08 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:26:08 check_reload_status 397 Reloading filter Dec 24 09:26:08 php-fpm 367 /rc.start_packages: Beginning configuration backup to https://acb.netgate.com/save Dec 24 09:26:08 check_reload_status 397 Syncing firewall Dec 24 09:26:08 php-fpm 367 /rc.start_packages: Configuration Change: (system): pfBlockerNG: saving DNSBL changes Dec 24 09:26:08 kernel done. Dec 24 09:26:08 php-fpm 367 /rc.start_packages: Restarting/Starting all packages. Dec 24 09:26:08 syslogd kernel boot file is /boot/kernel/kernel Dec 24 09:26:08 syslogd exiting on signal 15 Dec 24 09:26:08 kernel done. Dec 24 09:26:08 php 419 rc.bootup: Creating rrd update script Dec 24 09:26:05 php-fpm 368 /rc.dyndns.update: phpDynDNS (): No change in my IP address and/or 1 days has not passed. Not updating dynamic DNS entry. Dec 24 09:26:03 kernel .done. Dec 24 09:26:03 php 419 rc.bootup: The command '/usr/local/sbin/strongswanrc stop' returned exit code '1', the output was 'strongswan not running? (check /var/run/daemon-charon.pid).' Dec 24 09:26:03 kernel done. Dec 24 09:26:03 check_reload_status 397 Updating all dyndns Dec 24 09:26:02 kernel done. Dec 24 09:26:02 php 419 rc.bootup: NTPD is starting up. Dec 24 09:26:02 kernel done. Dec 24 09:26:00 newsyslog 90657 logfile turned over due to size>500K Dec 24 09:26:00 newsyslog 90657 logfile turned over due to size>500K Dec 24 09:25:55 kernel done. Dec 24 09:25:55 php 419 rc.bootup: sync unbound done. Dec 24 09:25:55 kernel em1: link state changed to UP Dec 24 09:25:55 check_reload_status 397 Linkup starting em1 Dec 24 09:25:55 php-fpm 368 /rc.newwanip: Interface is disabled, nothing to do. Dec 24 09:25:55 php-fpm 368 /rc.newwanip: rc.newwanip: Info: starting on ovpns1. Dec 24 09:25:55 kernel done. Dec 24 09:25:55 php 419 rc.bootup: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:25:54 php 419 rc.bootup: Default gateway setting Interface WAN_DHCP Gateway as default. Dec 24 09:25:54 kernel .done. Dec 24 09:25:54 kernel .... Dec 24 09:25:54 check_reload_status 397 rc.newwanip starting ovpns1 Dec 24 09:25:54 kernel pflog0: promiscuous mode enabled Dec 24 09:25:54 kernel ovpns1: link state changed to UP Dec 24 09:25:54 kernel tun1: changing name to 'ovpns1' Dec 24 09:25:54 php 419 rc.bootup: Resyncing OpenVPN instances. Dec 24 09:25:54 kernel done. Dec 24 09:25:53 php-fpm 368 /rc.newwanip: rc.newwanip: on (IP address: 47.185.169.177) (interface: WAN[wan]) (real interface: em0). Dec 24 09:25:53 php-fpm 368 /rc.newwanip: rc.newwanip: Info: starting on em0. Dec 24 09:25:52 check_reload_status 397 rc.newwanip starting em0 Dec 24 09:25:51 check_reload_status 397 Linkup starting em0.13 Dec 24 09:25:51 check_reload_status 397 Linkup starting em0.12 Dec 24 09:25:51 check_reload_status 397 Linkup starting em0.11 Dec 24 09:25:51 check_reload_status 397 Linkup starting em0.10 Dec 24 09:25:51 kernel em0.13: link state changed to UP Dec 24 09:25:51 kernel em0.12: link state changed to UP Dec 24 09:25:51 kernel em0.11: link state changed to UP Dec 24 09:25:51 kernel em0.10: link state changed to UP Dec 24 09:25:51 kernel em0: link state changed to UP Dec 24 09:25:51 check_reload_status 397 Linkup starting em0 Dec 24 09:25:50 kernel vlan3: changing name to 'em0.13' Dec 24 09:25:50 kernel vlan2: changing name to 'em0.12' Dec 24 09:25:50 kernel vlan1: changing name to 'em0.11' Dec 24 09:25:50 kernel vlan0: changing name to 'em0.10' Dec 24 09:25:49 sshguard 7489 Now monitoring attacks. Dec 24 09:25:49 sshd 7026 Server listening on 0.0.0.0 port 22. Dec 24 09:25:49 sshd 7026 Server listening on :: port 22. Dec 24 09:25:48 kernel lo0: link state changed to UP Dec 24 09:25:48 kernel tun_wg0: link state changed to UP Dec 24 09:25:48 kernel wg0: changing name to 'tun_wg0' Dec 24 09:25:48 kernel smbus0: on intsmb0 Dec 24 09:25:48 kernel intsmb0: intr IRQ 9 enabled revision 0 Dec 24 09:25:48 kernel intsmb0: irq 23 at device 7.0 on pci0 Dec 24 09:25:48 kernel TSC: P-state invariant Dec 24 09:25:48 kernel Structured Extended Features3=0x10000400 Dec 24 09:25:48 kernel Structured Extended Features=0x842529 Dec 24 09:25:48 kernel AMD Features2=0x121 Dec 24 09:25:48 kernel AMD Features=0x28100800 Dec 24 09:25:48 kernel Features2=0x5eda2203 Dec 24 09:25:48 kernel Features=0x178bfbff Dec 24 09:25:48 kernel Origin="GenuineIntel" Id=0x906e9 Family=0x6 Model=0x9e Stepping=9 Dec 24 09:25:48 kernel CPU: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz (4200.09-MHz K8-class CPU) Dec 24 09:25:48 kernel ada0: 8192MB (16777216 512 byte sectors) Dec 24 09:25:48 kernel ada0: 33.300MB/s transfers (UDMA2, PIO 65536bytes) Dec 24 09:25:48 kernel ada0: Serial Number VB5f9e7f89-df559544 Dec 24 09:25:48 kernel ada0: ATA-6 device Dec 24 09:25:48 kernel ada0 at ata0 bus 0 scbus0 target 0 lun 0 Dec 24 09:25:48 kernel Root mount waiting for: CAM Dec 24 09:25:48 kernel Root mount waiting for: CAM Dec 24 09:25:48 kernel Root mount waiting for: CAM Dec 24 09:25:48 kernel Root mount waiting for: CAM Dec 24 09:25:48 kernel Root mount waiting for: CAM Dec 24 09:25:48 kernel Root mount waiting for: CAM Dec 24 09:25:48 kernel Root mount waiting for: CAM Dec 24 09:25:48 kernel Root mount waiting for: CAM Dec 24 09:25:48 kernel Root mount waiting for: CAM Dec 24 09:25:48 kernel Root mount waiting for: CAM Dec 24 09:25:48 kernel Root mount waiting for: CAM Dec 24 09:25:48 kernel Trying to mount root from zfs:pfSense/ROOT/default []... Dec 24 09:25:48 kernel Timecounters tick every 10.000 msec Dec 24 09:25:48 kernel ZFS storage pool version: features support (5000) Dec 24 09:25:48 kernel ZFS filesystem version: 5 Dec 24 09:25:48 kernel to enable, add "vfs.zfs.prefetch_disable=0" to /boot/loader.conf. Dec 24 09:25:48 kernel ZFS NOTICE: Prefetch is disabled by default if less than 4GB of RAM is present; Dec 24 09:25:48 kernel Event timer "RTC" frequency 32768 Hz quality 0 Dec 24 09:25:48 kernel atrtc0: registered as a time-of-day clock, resolution 1.000000s Dec 24 09:25:48 kernel atrtc0: at port 0x70 irq 8 on isa0 Dec 24 09:25:48 kernel vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff pnpid PNP0900 on isa0 Dec 24 09:25:48 kernel orm0: at iomem 0xc0000-0xc7fff,0xe2000-0xeffff pnpid ORM0000 on isa0 Dec 24 09:25:48 kernel psm0: model IntelliMouse Explorer, device ID 4 Dec 24 09:25:48 kernel WARNING: Device "psm" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:25:48 kernel psm0: [GIANT-LOCKED] Dec 24 09:25:48 kernel psm0: irq 12 on atkbdc0 Dec 24 09:25:48 kernel atkbd0: [GIANT-LOCKED] Dec 24 09:25:48 kernel kbd0 at atkbd0 Dec 24 09:25:48 kernel atkbd0: irq 1 on atkbdc0 Dec 24 09:25:48 kernel atkbdc0: port 0x60,0x64 irq 1 on acpi0 Dec 24 09:25:48 kernel acpi_acad0: on acpi0 Dec 24 09:25:48 kernel em1: netmap queues/slots: TX 1/1024, RX 1/1024 Dec 24 09:25:48 kernel em1: Ethernet address: 08:00:27:ac:88:65 Dec 24 09:25:48 kernel em1: Using 1024 TX descriptors and 1024 RX descriptors Dec 24 09:25:48 kernel em1: port 0xd240-0xd247 mem 0xf0820000-0xf083ffff irq 16 at device 8.0 on pci0 Dec 24 09:25:48 kernel pci0: at device 7.0 (no driver attached) Dec 24 09:25:48 kernel pcm0: Dec 24 09:25:48 kernel pcm0: port 0xd100-0xd1ff,0xd200-0xd23f irq 21 at device 5.0 on pci0 Dec 24 09:25:48 kernel em0: netmap queues/slots: TX 1/1024, RX 1/1024 Dec 24 09:25:48 kernel em0: Ethernet address: 08:00:27:98:9a:b5 Dec 24 09:25:48 kernel em0: Using 1024 TX descriptors and 1024 RX descriptors Dec 24 09:25:48 kernel em0: port 0xd020-0xd027 mem 0xf0200000-0xf021ffff irq 19 at device 3.0 on pci0 Dec 24 09:25:48 kernel vgapci0: Boot video device Dec 24 09:25:48 kernel vgapci0: port 0xd010-0xd01f mem 0xe0000000-0xe3ffffff,0xf0000000-0xf01fffff irq 18 at device 2.0 on pci0 Dec 24 09:25:48 kernel ata1: at channel 1 on atapci0 Dec 24 09:25:48 kernel ata0: at channel 0 on atapci0 Dec 24 09:25:48 kernel atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xd000-0xd00f at device 1.1 on pci0 Dec 24 09:25:48 kernel isa0: on isab0 Dec 24 09:25:48 kernel isab0: at device 1.0 on pci0 Dec 24 09:25:48 kernel pci0: on pcib0 Dec 24 09:25:48 kernel pcib0: port 0xcf8-0xcff on acpi0 Dec 24 09:25:48 kernel acpi_timer0: <32-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0 Dec 24 09:25:48 kernel Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 Dec 24 09:25:48 kernel Event timer "i8254" frequency 1193182 Hz quality 100 Dec 24 09:25:48 kernel Timecounter "i8254" frequency 1193182 Hz quality 0 Dec 24 09:25:48 kernel attimer0: port 0x40-0x43,0x50-0x53 on acpi0 Dec 24 09:25:48 kernel cpu0: on acpi0 Dec 24 09:25:48 kernel acpi0: Sleep Button (fixed) Dec 24 09:25:48 kernel acpi0: Power Button (fixed) Dec 24 09:25:48 kernel acpi0: on motherboard Dec 24 09:25:48 kernel cryptosoft0: on motherboard Dec 24 09:25:48 kernel vtvga0: on motherboard Dec 24 09:25:48 kernel nexus0 Dec 24 09:25:48 kernel mlx5en: Mellanox Ethernet driver 3.6.0 (December 2020) Dec 24 09:25:48 kernel 000.000056 [4344] netmap_init netmap: loaded module Dec 24 09:25:48 kernel WARNING: Device "spkr" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:25:48 kernel random: fast provider: "Intel Secure Key RNG" Dec 24 09:25:48 kernel random: registering fast source Intel Secure Key RNG Dec 24 09:25:48 kernel [ath_hal] loaded Dec 24 09:25:48 kernel kbd1 at kbdmux0 Dec 24 09:25:48 kernel WARNING: Device "kbd" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:25:48 kernel module_register_init: MOD_LOAD (vesa, 0xffffffff8140a210, 0) error 19 Dec 24 09:25:48 kernel WARNING: Device "pci" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:25:48 kernel WARNING: Device "g_ctl" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:25:48 kernel wlan: mac acl policy registered Dec 24 09:25:48 kernel module_register_init: MOD_LOAD (iwi_monitor_fw, 0xffffffff80760b50, 0) error 1 Dec 24 09:25:48 kernel iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:25:48 kernel iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:25:48 kernel module_register_init: MOD_LOAD (iwi_ibss_fw, 0xffffffff80760aa0, 0) error 1 Dec 24 09:25:48 kernel iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:25:48 kernel iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:25:48 kernel module_register_init: MOD_LOAD (iwi_bss_fw, 0xffffffff807609f0, 0) error 1 Dec 24 09:25:48 kernel iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:25:48 kernel iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:25:48 kernel module_register_init: MOD_LOAD (ipw_monitor_fw, 0xffffffff80739160, 0) error 1 Dec 24 09:25:48 kernel ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:25:48 kernel ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:25:48 kernel module_register_init: MOD_LOAD (ipw_ibss_fw, 0xffffffff807390b0, 0) error 1 Dec 24 09:25:48 kernel ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:25:48 kernel ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:25:48 kernel module_register_init: MOD_LOAD (ipw_bss_fw, 0xffffffff80739000, 0) error 1 Dec 24 09:25:48 kernel ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:25:48 kernel ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:25:48 kernel random: entropy device external interface Dec 24 09:25:48 kernel Launching APs: 2 1 3 Dec 24 09:25:48 kernel ioapic0 irqs 0-23 on motherboard Dec 24 09:25:48 kernel ioapic0: MADT APIC ID 4 != hw id 0 Dec 24 09:25:48 kernel random: unblocking device. Dec 24 09:25:48 kernel FreeBSD/SMP: 1 package(s) x 4 cache groups x 1 core(s) Dec 24 09:25:48 kernel FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs Dec 24 09:25:48 kernel ACPI APIC Table: Dec 24 09:25:48 kernel Event timer "LAPIC" quality 100 Dec 24 09:25:48 kernel avail memory = 2014822400 (1921 MB) Dec 24 09:25:48 kernel real memory = 2147418112 (2047 MB) Dec 24 09:25:48 kernel TSC: P-state invariant Dec 24 09:25:48 kernel Structured Extended Features3=0x10000400 Dec 24 09:25:48 kernel Structured Extended Features=0x842529 Dec 24 09:25:48 kernel AMD Features2=0x121 Dec 24 09:25:48 kernel AMD Features=0x28100800 Dec 24 09:25:48 kernel Features2=0x5eda2203 Dec 24 09:25:48 kernel Features=0x1783fbff Dec 24 09:25:48 kernel Origin="GenuineIntel" Id=0x906e9 Family=0x6 Model=0x9e Stepping=9 Dec 24 09:25:48 kernel CPU: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz (4200.09-MHz K8-class CPU) Dec 24 09:25:48 kernel VT(vga): text 80x25 Dec 24 09:25:48 kernel FreeBSD clang version 10.0.1 (git@github.com:llvm/llvm-project.git llvmorg-10.0.1-0-gef32c611aa2) Dec 24 09:25:48 kernel FreeBSD 12.3-STABLE RELENG_2_6_0-n226742-1285d6d205f pfSense amd64 Dec 24 09:25:48 kernel FreeBSD is a registered trademark of The FreeBSD Foundation. Dec 24 09:25:48 kernel The Regents of the University of California. All rights reserved. Dec 24 09:25:48 kernel Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 Dec 24 09:25:48 kernel Copyright (c) 1992-2021 The FreeBSD Project. Dec 24 09:25:48 kernel ---<>--- Dec 24 09:25:48 syslogd kernel boot file is /boot/kernel/kernel Dec 24 09:25:07 syslogd exiting on signal 15 Dec 24 09:25:07 reboot 74886 rebooted by root Dec 24 09:25:05 php_pfb 70840 [pfBlockerNG] filterlog daemon stopped Dec 24 09:25:05 tail_pfb 70552 [pfBlockerNG] Firewall Filter Service stopped Dec 24 09:25:05 lighttpd_pfb 69116 [pfBlockerNG] DNSBL Webserver stopped Dec 24 09:25:05 php 34127 rc.initial.reboot: The command '/usr/local/etc/rc.d/wireguardd stop' returned exit code '1', the output was '' Dec 24 09:24:13 php-fpm 368 /rc.dyndns.update: phpDynDNS (): No change in my IP address and/or 1 days has not passed. Not updating dynamic DNS entry. Dec 24 09:24:12 php-fpm 20083 /rc.openvpn: OpenVPN: One or more OpenVPN tunnel endpoints may have changed its IP. Reloading endpoints that may use WAN_DHCP. Dec 24 09:24:12 php-fpm 20083 /rc.openvpn: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:24:11 check_reload_status 397 Reloading filter Dec 24 09:24:11 check_reload_status 397 Restarting OpenVPN tunnels/interfaces Dec 24 09:24:11 check_reload_status 397 Restarting IPsec tunnels Dec 24 09:24:11 check_reload_status 397 updating dyndns WAN_DHCP Dec 24 09:24:11 rc.gateway_alarm 52241 >>> Gateway alarm: WAN_DHCP (Addr:47.185.169.1 Alarm:1 RTT:0.000ms RTTsd:0.000ms Loss:100%) Dec 24 09:24:09 kernel tun_wg0: link state changed to DOWN Dec 24 09:24:09 php 34127 rc.initial.reboot: Stopping all packages. Dec 24 09:16:12 login 91726 login on ttyv0 as root Dec 24 09:12:29 sshguard 44358 192.168.0.91: unblocking after 133 secs Dec 24 09:11:09 sshd 88739 Timeout, client not responding from user admin 192.168.0.101 port 65227 Dec 24 09:10:39 php-fpm 20083 /rc.dyndns.update: phpDynDNS (): No change in my IP address and/or 1 days has not passed. Not updating dynamic DNS entry. Dec 24 09:10:39 php-fpm 368 /rc.openvpn: OpenVPN: One or more OpenVPN tunnel endpoints may have changed its IP. Reloading endpoints that may use WAN_DHCP. Dec 24 09:10:39 php-fpm 368 /rc.openvpn: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:10:38 check_reload_status 397 Reloading filter Dec 24 09:10:38 check_reload_status 397 Restarting OpenVPN tunnels/interfaces Dec 24 09:10:38 check_reload_status 397 Restarting IPsec tunnels Dec 24 09:10:38 check_reload_status 397 updating dyndns WAN_DHCP Dec 24 09:10:38 rc.gateway_alarm 91116 >>> Gateway alarm: WAN_DHCP (Addr:47.185.169.1 Alarm:1 RTT:3.009ms RTTsd:2.085ms Loss:22%) Dec 24 09:10:16 sshd 86922 Connection closed by authenticating user admin 192.168.0.91 port 37542 [preauth] Dec 24 09:10:16 sshguard 44358 Blocking "192.168.0.91/32" for 120 secs (5 attacks in 60 secs, after 1 abuses over 60 secs.) Dec 24 09:10:16 sshguard 44358 Attack from "192.168.0.91" on service SSH with danger 10. Dec 24 09:10:16 sshd 86922 error: PAM: Authentication error for admin from 192.168.0.91 Dec 24 09:09:46 sshguard 44358 Attack from "192.168.0.91" on service SSH with danger 2. Dec 24 09:09:46 sshd 55748 Connection closed by authenticating user admin 192.168.0.91 port 37398 [preauth] Dec 24 09:09:46 sshguard 44358 Attack from "192.168.0.91" on service SSH with danger 10. Dec 24 09:09:46 sshd 55748 error: PAM: Authentication error for admin from 192.168.0.91 Dec 24 09:09:16 sshguard 44358 Attack from "192.168.0.91" on service SSH with danger 2. Dec 24 09:09:16 sshd 50491 Connection closed by authenticating user admin 192.168.0.91 port 35574 [preauth] Dec 24 09:09:16 sshguard 44358 Attack from "192.168.0.91" on service SSH with danger 10. Dec 24 09:09:16 sshd 50491 error: PAM: Authentication error for admin from 192.168.0.91 Dec 24 09:08:50 php-fpm 368 /rc.dyndns.update: phpDynDNS (): (Success) IP Address Updated Successfully! Dec 24 09:08:50 php-fpm 368 /rc.dyndns.update: phpDynDNS: updating cache file /conf/dyndns_wancustom''0.cache: 47.185.169.177 Dec 24 09:08:50 sshguard 44358 Now monitoring attacks. Dec 24 09:08:50 login 41888 login on ttyv0 as root Dec 24 09:08:49 check_reload_status 397 Reloading filter Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:08:49 check_reload_status 397 Syncing firewall Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:08:49 kernel tun_wg0: link state changed to UP Dec 24 09:08:49 kernel wg0: changing name to 'tun_wg0' Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:08:49 php 22911 /usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:08:48 kernel tun_wg0: link state changed to DOWN Dec 24 09:08:48 root 27644 Bootup complete Dec 24 09:08:48 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary. Dec 24 09:08:48 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard). Dec 24 09:08:48 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard). Dec 24 09:08:48 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard). Dec 24 09:08:48 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard). Dec 24 09:08:48 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s). Dec 24 09:08:48 check_reload_status 397 Syncing firewall Dec 24 09:08:48 php-fpm 367 /rc.start_packages: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s). Dec 24 09:08:48 check_reload_status 397 Reloading filter Dec 24 09:08:48 php-fpm 367 /rc.start_packages: Beginning configuration backup to https://acb.netgate.com/save Dec 24 09:08:48 check_reload_status 397 Syncing firewall Dec 24 09:08:48 php-fpm 367 /rc.start_packages: Configuration Change: (system): pfBlockerNG: saving DNSBL changes Dec 24 09:08:48 php-fpm 367 /rc.start_packages: Restarting/Starting all packages. Dec 24 09:08:48 kernel done. Dec 24 09:08:48 kernel done. Dec 24 09:08:48 syslogd kernel boot file is /boot/kernel/kernel Dec 24 09:08:48 syslogd exiting on signal 15 Dec 24 09:08:47 php 419 rc.bootup: Creating rrd update script Dec 24 09:08:46 sshguard 90059 Attack from "192.168.0.91" on service SSH with danger 2. Dec 24 09:08:46 sshd 68540 Connection closed by authenticating user admin 192.168.0.91 port 54658 [preauth] Dec 24 09:08:46 sshguard 90059 Attack from "192.168.0.91" on service SSH with danger 10. Dec 24 09:08:46 sshd 68540 error: PAM: Authentication error for admin from 192.168.0.91 Dec 24 09:08:43 php 419 rc.bootup: The command '/usr/local/sbin/strongswanrc stop' returned exit code '1', the output was 'strongswan not running? (check /var/run/daemon-charon.pid).' Dec 24 09:08:43 kernel done. Dec 24 09:08:43 check_reload_status 397 Updating all dyndns Dec 24 09:08:42 kernel done. Dec 24 09:08:42 php 419 rc.bootup: NTPD is starting up. Dec 24 09:08:42 kernel done. Dec 24 09:08:41 sshguard 90059 Now monitoring attacks. Dec 24 09:08:41 sshd 88739 Accepted keyboard-interactive/pam for admin from 192.168.0.101 port 65227 ssh2 Dec 24 09:08:37 kernel done. Dec 24 09:08:37 php 419 rc.bootup: sync unbound done. Dec 24 09:08:37 kernel em1: link state changed to UP Dec 24 09:08:37 check_reload_status 397 Linkup starting em1 Dec 24 09:08:37 php-fpm 368 /rc.newwanip: Interface is disabled, nothing to do. Dec 24 09:08:37 php-fpm 368 /rc.newwanip: rc.newwanip: Info: starting on ovpns1. Dec 24 09:08:36 kernel done. Dec 24 09:08:36 php 419 rc.bootup: Gateway, none 'available' for inet6, use the first one configured. '' Dec 24 09:08:36 php 419 rc.bootup: Default gateway setting Interface WAN_DHCP Gateway as default. Dec 24 09:08:36 kernel .done. Dec 24 09:08:36 kernel .... Dec 24 09:08:36 kernel pflog0: promiscuous mode enabled Dec 24 09:08:36 check_reload_status 397 rc.newwanip starting ovpns1 Dec 24 09:08:36 kernel ovpns1: link state changed to UP Dec 24 09:08:36 kernel tun1: changing name to 'ovpns1' Dec 24 09:08:36 php 419 rc.bootup: Resyncing OpenVPN instances. Dec 24 09:08:35 kernel done. Dec 24 09:08:35 php-fpm 368 /rc.newwanip: rc.newwanip: on (IP address: 47.185.169.177) (interface: WAN[wan]) (real interface: em0). Dec 24 09:08:35 php-fpm 368 /rc.newwanip: rc.newwanip: Info: starting on em0. Dec 24 09:08:34 check_reload_status 397 rc.newwanip starting em0 Dec 24 09:08:33 check_reload_status 397 Linkup starting em0.13 Dec 24 09:08:33 check_reload_status 397 Linkup starting em0.12 Dec 24 09:08:33 check_reload_status 397 Linkup starting em0.11 Dec 24 09:08:33 check_reload_status 397 Linkup starting em0.10 Dec 24 09:08:33 kernel em0.13: link state changed to UP Dec 24 09:08:33 kernel em0.12: link state changed to UP Dec 24 09:08:33 kernel em0.11: link state changed to UP Dec 24 09:08:33 kernel em0.10: link state changed to UP Dec 24 09:08:33 kernel em0: link state changed to UP Dec 24 09:08:33 check_reload_status 397 Linkup starting em0 Dec 24 09:08:32 kernel vlan3: changing name to 'em0.13' Dec 24 09:08:32 kernel vlan2: changing name to 'em0.12' Dec 24 09:08:32 kernel vlan1: changing name to 'em0.11' Dec 24 09:08:32 kernel vlan0: changing name to 'em0.10' Dec 24 09:08:31 sshguard 7954 Now monitoring attacks. Dec 24 09:08:31 sshd 7395 Server listening on 0.0.0.0 port 22. Dec 24 09:08:31 sshd 7395 Server listening on :: port 22. Dec 24 09:08:30 kernel lo0: link state changed to UP Dec 24 09:08:30 kernel tun_wg0: link state changed to UP Dec 24 09:08:30 kernel wg0: changing name to 'tun_wg0' Dec 24 09:08:30 kernel smbus0: on intsmb0 Dec 24 09:08:30 kernel intsmb0: intr IRQ 9 enabled revision 0 Dec 24 09:08:30 kernel intsmb0: irq 23 at device 7.0 on pci0 Dec 24 09:08:30 kernel TSC: P-state invariant Dec 24 09:08:30 kernel Structured Extended Features3=0x10000400 Dec 24 09:08:30 kernel Structured Extended Features=0x842529 Dec 24 09:08:30 kernel AMD Features2=0x121 Dec 24 09:08:30 kernel AMD Features=0x28100800 Dec 24 09:08:30 kernel Features2=0x5eda2203 Dec 24 09:08:30 kernel Features=0x178bfbff Dec 24 09:08:30 kernel Origin="GenuineIntel" Id=0x906e9 Family=0x6 Model=0x9e Stepping=9 Dec 24 09:08:30 kernel CPU: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz (4200.09-MHz K8-class CPU) Dec 24 09:08:30 kernel ada0: 8192MB (16777216 512 byte sectors) Dec 24 09:08:30 kernel ada0: 33.300MB/s transfers (UDMA2, PIO 65536bytes) Dec 24 09:08:30 kernel ada0: Serial Number VB5f9e7f89-df559544 Dec 24 09:08:30 kernel ada0: ATA-6 device Dec 24 09:08:30 kernel ada0 at ata0 bus 0 scbus0 target 0 lun 0 Dec 24 09:08:30 kernel Root mount waiting for: CAM Dec 24 09:08:30 kernel Root mount waiting for: CAM Dec 24 09:08:30 kernel Root mount waiting for: CAM Dec 24 09:08:30 kernel Root mount waiting for: CAM Dec 24 09:08:30 kernel Root mount waiting for: CAM Dec 24 09:08:30 kernel Root mount waiting for: CAM Dec 24 09:08:30 kernel Root mount waiting for: CAM Dec 24 09:08:30 kernel Root mount waiting for: CAM Dec 24 09:08:30 kernel Root mount waiting for: CAM Dec 24 09:08:30 kernel Root mount waiting for: CAM Dec 24 09:08:30 kernel Trying to mount root from zfs:pfSense/ROOT/default []... Dec 24 09:08:30 kernel Timecounters tick every 10.000 msec Dec 24 09:08:30 kernel ZFS storage pool version: features support (5000) Dec 24 09:08:30 kernel ZFS filesystem version: 5 Dec 24 09:08:30 kernel to enable, add "vfs.zfs.prefetch_disable=0" to /boot/loader.conf. Dec 24 09:08:30 kernel ZFS NOTICE: Prefetch is disabled by default if less than 4GB of RAM is present; Dec 24 09:08:30 kernel Event timer "RTC" frequency 32768 Hz quality 0 Dec 24 09:08:30 kernel atrtc0: registered as a time-of-day clock, resolution 1.000000s Dec 24 09:08:30 kernel atrtc0: at port 0x70 irq 8 on isa0 Dec 24 09:08:30 kernel vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff pnpid PNP0900 on isa0 Dec 24 09:08:30 kernel orm0: at iomem 0xc0000-0xc7fff,0xe2000-0xeffff pnpid ORM0000 on isa0 Dec 24 09:08:30 kernel psm0: model IntelliMouse Explorer, device ID 4 Dec 24 09:08:30 kernel WARNING: Device "psm" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:08:30 kernel psm0: [GIANT-LOCKED] Dec 24 09:08:30 kernel psm0: irq 12 on atkbdc0 Dec 24 09:08:30 kernel atkbd0: [GIANT-LOCKED] Dec 24 09:08:30 kernel kbd0 at atkbd0 Dec 24 09:08:30 kernel atkbd0: irq 1 on atkbdc0 Dec 24 09:08:30 kernel atkbdc0: port 0x60,0x64 irq 1 on acpi0 Dec 24 09:08:30 kernel acpi_acad0: on acpi0 Dec 24 09:08:30 kernel em1: netmap queues/slots: TX 1/1024, RX 1/1024 Dec 24 09:08:30 kernel em1: Ethernet address: 08:00:27:ac:88:65 Dec 24 09:08:30 kernel em1: Using 1024 TX descriptors and 1024 RX descriptors Dec 24 09:08:30 kernel em1: port 0xd240-0xd247 mem 0xf0820000-0xf083ffff irq 16 at device 8.0 on pci0 Dec 24 09:08:30 kernel pci0: at device 7.0 (no driver attached) Dec 24 09:08:30 kernel pcm0: Dec 24 09:08:30 kernel pcm0: port 0xd100-0xd1ff,0xd200-0xd23f irq 21 at device 5.0 on pci0 Dec 24 09:08:30 kernel em0: netmap queues/slots: TX 1/1024, RX 1/1024 Dec 24 09:08:30 kernel em0: Ethernet address: 08:00:27:98:9a:b5 Dec 24 09:08:30 kernel em0: Using 1024 TX descriptors and 1024 RX descriptors Dec 24 09:08:30 kernel em0: port 0xd020-0xd027 mem 0xf0200000-0xf021ffff irq 19 at device 3.0 on pci0 Dec 24 09:08:30 kernel vgapci0: Boot video device Dec 24 09:08:30 kernel vgapci0: port 0xd010-0xd01f mem 0xe0000000-0xe3ffffff,0xf0000000-0xf01fffff irq 18 at device 2.0 on pci0 Dec 24 09:08:30 kernel ata1: at channel 1 on atapci0 Dec 24 09:08:30 kernel ata0: at channel 0 on atapci0 Dec 24 09:08:30 kernel atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xd000-0xd00f at device 1.1 on pci0 Dec 24 09:08:30 kernel isa0: on isab0 Dec 24 09:08:30 kernel isab0: at device 1.0 on pci0 Dec 24 09:08:30 kernel pci0: on pcib0 Dec 24 09:08:30 kernel pcib0: port 0xcf8-0xcff on acpi0 Dec 24 09:08:30 kernel acpi_timer0: <32-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0 Dec 24 09:08:30 kernel Timecounter "ACPI-fast" frequency 3579545 Hz quality 900 Dec 24 09:08:30 kernel Event timer "i8254" frequency 1193182 Hz quality 100 Dec 24 09:08:30 kernel Timecounter "i8254" frequency 1193182 Hz quality 0 Dec 24 09:08:30 kernel attimer0: port 0x40-0x43,0x50-0x53 on acpi0 Dec 24 09:08:30 kernel cpu0: on acpi0 Dec 24 09:08:30 kernel acpi0: Sleep Button (fixed) Dec 24 09:08:30 kernel acpi0: Power Button (fixed) Dec 24 09:08:30 kernel acpi0: on motherboard Dec 24 09:08:30 kernel cryptosoft0: on motherboard Dec 24 09:08:30 kernel vtvga0: on motherboard Dec 24 09:08:30 kernel nexus0 Dec 24 09:08:30 kernel mlx5en: Mellanox Ethernet driver 3.6.0 (December 2020) Dec 24 09:08:30 kernel 000.000056 [4344] netmap_init netmap: loaded module Dec 24 09:08:30 kernel WARNING: Device "spkr" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:08:30 kernel random: fast provider: "Intel Secure Key RNG" Dec 24 09:08:30 kernel random: registering fast source Intel Secure Key RNG Dec 24 09:08:30 kernel [ath_hal] loaded Dec 24 09:08:30 kernel kbd1 at kbdmux0 Dec 24 09:08:30 kernel WARNING: Device "kbd" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:08:30 kernel module_register_init: MOD_LOAD (vesa, 0xffffffff8140a210, 0) error 19 Dec 24 09:08:30 kernel WARNING: Device "pci" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:08:30 kernel WARNING: Device "g_ctl" is Giant locked and may be deleted before FreeBSD 14.0. Dec 24 09:08:30 kernel wlan: mac acl policy registered Dec 24 09:08:30 kernel module_register_init: MOD_LOAD (iwi_monitor_fw, 0xffffffff80760b50, 0) error 1 Dec 24 09:08:30 kernel iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:08:30 kernel iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:08:30 kernel module_register_init: MOD_LOAD (iwi_ibss_fw, 0xffffffff80760aa0, 0) error 1 Dec 24 09:08:30 kernel iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:08:30 kernel iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:08:30 kernel module_register_init: MOD_LOAD (iwi_bss_fw, 0xffffffff807609f0, 0) error 1 Dec 24 09:08:30 kernel iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.conf. Dec 24 09:08:30 kernel iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LICENSE. Dec 24 09:08:30 kernel module_register_init: MOD_LOAD (ipw_monitor_fw, 0xffffffff80739160, 0) error 1 Dec 24 09:08:30 kernel ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:08:30 kernel ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:08:30 kernel module_register_init: MOD_LOAD (ipw_ibss_fw, 0xffffffff807390b0, 0) error 1 Dec 24 09:08:30 kernel ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:08:30 kernel ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:08:30 kernel module_register_init: MOD_LOAD (ipw_bss_fw, 0xffffffff80739000, 0) error 1 Dec 24 09:08:30 kernel ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. Dec 24 09:08:30 kernel ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw.LICENSE. Dec 24 09:08:30 kernel random: entropy device external interface Dec 24 09:08:30 kernel Launching APs: 1 2 3 Dec 24 09:08:30 kernel ioapic0 irqs 0-23 on motherboard Dec 24 09:08:30 kernel ioapic0: MADT APIC ID 4 != hw id 0 Dec 24 09:08:30 kernel random: unblocking device. Dec 24 09:08:30 kernel FreeBSD/SMP: 1 package(s) x 4 cache groups x 1 core(s)