[collector:] client ns1,legatech,ch.freebsd freebsd [date] Thu Nov 21 05:43:52 CET 2024 [uname] FreeBSD ns1.legatech.ch 14.1-RELEASE-p6 FreeBSD 14.1-RELEASE-p6 releng/14.1-n267727-74b6c983723c NS1 amd64 [uptime] 5:43AM up 1 day, 23:39, 0 users, load averages: 0.37, 0.26, 0.19 [who] [df] Filesystem Size Used Avail Capacity Mounted on /dev/vtbd0p2 82G 34G 42G 44% / [inode] Filesystem itotal iused ifree %iused Mounted /dev/vtbd0p2 10433278 781022 9652256 7% / [mount] /dev/vtbd0p2 on / (ufs, local, soft-updates, journaled soft-updates) devfs on /dev (devfs) fdescfs on /dev/fd (fdescfs) procfs on /proc (procfs, local) [meminfo] Total:4073 Free:160 [swapinfo] Device 1K-blocks Used Avail Capacity /dev/vtbd0p3 1048028 0 1048028 0% [vmtotal] vm.vmtotal: System wide totals computed every five seconds: (values in kilobytes) =============================================== Processes: (RUNQ: 1 Disk Wait: 0 Page Wait: 0 Sleep: 45) Virtual Memory: (Total: 606072K Active: 554220K) Real Memory: (Total: 118456K Active: 116508K) Shared Virtual Memory: (Total: 66084K Active: 39572K) Shared Real Memory: (Total: 34212K Active: 32344K) Free Memory: 165108K [ifconfig] vtnet0: flags=1008843 metric 0 mtu 1500 options=4c07bb ether 00:50:56:8d:dc:9b inet 172.19.11.90 netmask 0xffffff00 broadcast 172.19.11.255 media: Ethernet autoselect (10Gbase-T ) status: active nd6 options=29 lo0: flags=1008049 metric 0 mtu 16384 options=680003 inet 127.0.0.1 netmask 0xff000000 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2 groups: lo nd6 options=21 [route] Routing tables Internet: Destination Gateway Flags Netif Expire default 172.19.11.1 UGS vtnet0 127.0.0.1 link#2 UH lo0 172.19.11.0/24 link#1 U vtnet0 172.19.11.90 link#2 UHS lo0 Internet6: Destination Gateway Flags Netif Expire ::/96 link#2 URS lo0 ::1 link#2 UHS lo0 ::ffff:0.0.0.0/96 link#2 URS lo0 fe80::%lo0/10 link#2 URS lo0 fe80::%lo0/64 link#2 U lo0 fe80::1%lo0 link#2 UHS lo0 ff02::/16 link#2 URS lo0 [ifstat] Name Mtu Network Address Ipkts Ierrs Idrop Ibytes Opkts Oerrs Obytes Coll vtnet0 1500 00:50:56:8d:dc:9b 432063 0 0 52893184 338982 0 1011677181 0 [netstat] tcp: 177963 packets sent 136616 data packets (965124101 bytes) 2273 data packets (1163428 bytes) retransmitted 152 data packets unnecessarily retransmitted 0 resends initiated by MTU discovery 25585 ack-only packets (5536 delayed) 0 URG only packets 0 window probe packets 20 window update packets 13469 control packets 189309 packets received 140872 acks (for 964485789 bytes) 1817 duplicate acks 0 UDP tunneled pkts 0 UDP tunneled pkt cnt with errors 0 acks for unsent data 70635 packets (9267607 bytes) received in-sequence 909 completely duplicate packets (114748 bytes) 1 old duplicate packet 4 packets with some dup. data (2248 bytes duped) 184 out-of-order packets (34974 bytes) 0 packets (0 bytes) of data after window 0 window probes 22 window update packets 41 packets received with dsack 18904 dsack bytes received (no TLP involved) 0 dsack bytes received (TLP responsible) 1460 packets received after close 12 discarded for bad checksums 0 discarded for bad header offset fields 0 discarded because packet too short 0 discarded due to full reassembly queue 4228 connection requests 3521 connection accepts 17 bad connection attempts 0 listen queue overflows 947 ignored RSTs in the windows 7746 connections established (including accepts) 6098 times used RTT from hostcache 6098 times used RTT variance from hostcache 2833 times used slow-start threshold from hostcache 38680 connections closed (including 2568 drops) 5958 connections updated cached RTT on close 5958 connections updated cached RTT variance on close 1475 connections updated cached ssthresh on close 0 embryonic connections dropped 140736 segments updated rtt (of 131312 attempts) 1896 retransmit timeouts 62 connections dropped by rexmit timeout 0 persist timeouts 0 connections dropped by persist timeout 0 Connections (fin_wait_2) dropped because of timeout 1 keepalive timeout 0 keepalive probes sent 0 connections dropped by keepalive 0 connections dropped due to exceeding progress time 78301 correct ACK header predictions 24504 correct data packet header predictions 4095 syncache entries added 376 retransmitted 209 dupsyn 0 dropped 3521 completed 0 bucket overflow 0 cache overflow 538 reset 36 stale 0 aborted 0 badack 0 unreach 0 zone failures 4095 cookies sent 0 cookies received 458 hostcache entries added 0 bucket overflow 206 SACK recovery episodes 989 segment rexmits in SACK recovery episodes 357189 byte rexmits in SACK recovery episodes 2226 SACK options (SACK blocks) received 502 SACK options (SACK blocks) sent 0 SACK retransmissions lost 0 SACK scoreboard overflow 0 packets received with ECN CE bit set 240 packets received with ECN ECT(0) bit set 0 packets received with ECN ECT(1) bit set 164 packets sent with ECN ECT(0) bit set 0 packets sent with ECN ECT(1) bit set 54 successful ECN handshakes 0 times ECN reduced the congestion window 0 ACE SYN packets with Non-ECT 0 ACE SYN packets with ECT0 0 ACE SYN packets with ECT1 0 ACE SYN packets with CE 0 packets with matching signature received 0 packets with bad signature received 0 times failed to make signature due to no SA 0 times unexpected signature received 0 times no signature provided by segment 0 Path MTU discovery black hole detection activations 0 Path MTU discovery black hole detection min MSS activations 0 Path MTU discovery black hole detection failures 403 times connection in TIME-WAIT responded with ACK 0 times connection in TIME-WAIT was actively recycled 0 times connection in TIME-WAIT responded with RST TCP connection count by state: 0 connections in CLOSED state 32 connections in LISTEN state 0 connections in SYN_SENT state 0 connections in SYN_RCVD state 1 connection in ESTABLISHED state 0 connections in CLOSE_WAIT state 0 connections in FIN_WAIT_1 state 0 connections in CLOSING state 0 connections in LAST_ACK state 0 connections in FIN_WAIT_2 state 7 connections in TIME_WAIT state udp: 234794 datagrams received 0 with incomplete header 0 with bad data length field 0 with bad checksum 279 with no checksum 46934 dropped due to no socket 29909 broadcast/multicast datagrams undelivered 0 dropped due to full socket buffers 0 not for hashed pcb 157951 delivered 189251 datagrams output 0 times multicast source filter matched ip: 466618 total packets received 0 bad header checksums 0 with size smaller than minimum 0 with data size < data length 0 with ip length > max ip packet size 0 with header length < data size 0 with data length < header length 0 with bad options 0 with incorrect version number 0 fragments received 0 fragments dropped (dup or out of space) 0 fragments dropped after timeout 0 packets reassembled ok 466618 packets for this host 0 packets for unknown/unsupported protocol 0 packets forwarded (0 packets fast forwarded) 0 packets not forwardable 0 packets received for unknown multicast group 0 redirects sent 409621 packets sent from this host 0 packets sent with fabricated ip header 0 output packets dropped due to no bufs, etc. 5 output packets discarded due to no route 0 output datagrams fragmented 0 fragments created 0 datagrams that can't be fragmented 0 tunneling packets that can't find gif 0 datagrams with bad address in header icmp: 88 calls to icmp_error 0 errors not generated in response to an icmp message Output histogram: echo reply: 41943 destination unreachable: 88 0 messages with bad code fields 0 messages less than the minimum length 0 messages with bad checksum 0 messages with bad length 0 multicast echo requests ignored 0 multicast timestamp requests ignored Input histogram: destination unreachable: 307 echo: 41943 41943 message responses generated 0 invalid return addresses 0 no return routes ICMP address mask responses are disabled igmp: 265 messages received 0 messages received with too few bytes 0 messages received with wrong TTL 0 messages received with bad checksum 0 V1/V2 membership queries received 0 V3 membership queries received 0 membership queries received with invalid field(s) 0 general queries received 0 group queries received 0 group-source queries received 0 group-source queries dropped 0 membership reports received 0 membership reports received with invalid field(s) 0 membership reports received for groups to which we belong 0 V3 reports received without Router Alert 0 membership reports sent arp: 5 ARP requests sent 0 ARP requests failed to sent 966 ARP replies sent 25060 ARP requests received 4 ARP replies received 25064 ARP packets received 0 total packets dropped due to no ARP entry 19 ARP entrys timed out 0 Duplicate IPs seen ip6: 0 total packets received 0 with size smaller than minimum 0 with data size < data length 0 with bad options 0 with incorrect version number 0 fragments received 0 fragments dropped (dup or out of space) 0 fragments dropped after timeout 0 fragments that exceeded limit 0 atomic fragments 0 packets reassembled ok 0 packets for this host 0 packets forwarded 0 packets not forwardable 0 redirects sent 0 packets sent from this host 0 packets sent with fabricated ip header 0 output packets dropped due to no bufs, etc. 20523 output packets discarded due to no route 0 output datagrams fragmented 0 fragments created 0 datagrams that can't be fragmented 0 packets that violated scope rules 0 multicast packets which we don't join Mbuf statistics: 0 one mbuf 0 one ext mbuf 0 two or more ext mbuf 0 packets whose headers are not contiguous 0 tunneling packets that can't find gif 0 packets discarded because of too many headers 1 failure of source address selection source addresses on a non-outgoing I/F 1 addresses scope=0xf Source addresses selection rule applied: 1 same address icmp6: 0 calls to icmp6_error 0 errors not generated in response to an icmp6 message 0 errors not generated because of rate limitation 0 messages with bad code fields 0 messages < minimum length 0 bad checksums 0 messages with bad length 0 total packets dropped due to failed NDP resolution Histogram of error messages to be generated: 0 no route 0 administratively prohibited 0 beyond scope 0 address unreachable 0 port unreachable 0 packet too big 0 time exceed transit 0 time exceed reassembly 0 erroneous header field 0 unrecognized next header 0 unrecognized option 0 redirect 0 unknown 0 message responses generated 0 messages with too many ND options 0 messages with bad ND options 0 bad neighbor solicitation messages 0 bad neighbor advertisement messages 0 bad router solicitation messages 0 bad router advertisement messages 0 bad redirect messages 0 default routers overflows 0 prefix overflows 0 neighbour entries overflows 0 redirect overflows 0 messages with invalid hop limit 0 path MTU changes rip6: 0 messages received 0 checksum calculations on inbound 0 messages with bad checksum 0 messages dropped due to no socket 0 multicast messages dropped due to no socket 0 messages dropped due to full socket buffers 0 delivered 0 datagrams output [ports] tcp4 0 64 172.19.11.90.22 82.65.183.225.56916 ESTABLISHED tcp4 0 0 172.19.11.90.22 82.65.183.225.56640 TIME_WAIT tcp4 0 0 172.19.11.90.22 82.65.183.225.55900 TIME_WAIT tcp4 0 0 172.19.11.90.22 82.65.183.225.54734 TIME_WAIT tcp4 0 0 172.19.11.90.22 82.65.183.225.54246 TIME_WAIT tcp4 0 0 172.19.11.90.22 82.65.183.225.53444 TIME_WAIT tcp4 0 0 172.19.11.90.22 82.65.183.225.52940 TIME_WAIT tcp4 0 0 172.19.11.90.22 82.65.183.225.52488 TIME_WAIT tcp4 0 0 *.25 *.* LISTEN tcp4 0 0 *.22 *.* LISTEN tcp4 0 0 *.10050 *.* LISTEN tcp4 0 0 *.4949 *.* LISTEN tcp4 0 0 127.0.0.1.953 *.* LISTEN tcp4 0 0 127.0.0.1.953 *.* LISTEN tcp4 0 0 127.0.0.1.953 *.* LISTEN tcp4 0 0 127.0.0.1.953 *.* LISTEN tcp4 0 0 127.0.0.1.53 *.* LISTEN tcp4 0 0 127.0.0.1.53 *.* LISTEN tcp4 0 0 127.0.0.1.53 *.* LISTEN tcp4 0 0 127.0.0.1.53 *.* LISTEN tcp4 0 0 172.19.11.90.53 *.* LISTEN tcp4 0 0 172.19.11.90.53 *.* LISTEN tcp4 0 0 172.19.11.90.53 *.* LISTEN tcp4 0 0 172.19.11.90.53 *.* LISTEN tcp6 0 0 *.25 *.* LISTEN tcp6 0 0 *.22 *.* LISTEN tcp6 0 0 *.10050 *.* LISTEN tcp6 0 0 *.4949 *.* LISTEN tcp6 0 0 ::1.953 *.* LISTEN tcp6 0 0 ::1.953 *.* LISTEN tcp6 0 0 ::1.953 *.* LISTEN tcp6 0 0 ::1.953 *.* LISTEN tcp6 0 0 fe80::1%lo0.53 *.* LISTEN tcp6 0 0 fe80::1%lo0.53 *.* LISTEN tcp6 0 0 fe80::1%lo0.53 *.* LISTEN tcp6 0 0 fe80::1%lo0.53 *.* LISTEN tcp6 0 0 ::1.53 *.* LISTEN tcp6 0 0 ::1.53 *.* LISTEN tcp6 0 0 ::1.53 *.* LISTEN tcp6 0 0 ::1.53 *.* LISTEN [ps] PID PPID USER STARTED STAT PRI %CPU TIME %MEM RSS VSZ COMMAND 0 0 root Tue06 DLs -16 0.0 0:00.82 0.0 656 0 [kernel] 1 0 root Tue06 SLs 20 0.0 0:00.09 0.0 460 11700 - /sbin/init 416 1 root Tue06 Is 20 0.0 0:00.06 0.1 2676 14396 |-- /sbin/devd 674 1 root Tue06 Ss 1 0.0 0:01.01 0.1 2144 12876 |-- /usr/sbin/syslogd -s 689 1 bind Tue06 Is 68 0.0 0:29.51 0.7 27328 105816 |-- /usr/local/sbin/named -u bind -c /usr/local/etc/namedb/named.conf 761 1 root Tue06 Ss 20 0.0 0:08.50 0.1 4688 22336 |-- /usr/local/sbin/ntpd -g -c /etc/ntp.conf 764 1 root Tue06 Ss 20 0.0 0:07.69 0.3 14324 27628 |-- /usr/local/bin/perl -wT /usr/local/sbin/munin-node 791 1 xymon Tue06 Ss 20 0.0 0:00.94 0.0 1800 12796 |-- /usr/local/www/xymon/client/bin/xymonlaunch --config=/usr/local/www/xymon/client/etc/clientlaunch.cfg --log=/usr/local/www/xymon/client/logs/clientlaunch.log --pidfile=/usr/local/www/xymon/client/logs/clientlaunch.ns1.legatech.ch.pid 85663 791 xymon 05:43 S 60 0.0 0:00.00 0.1 2304 13376 | `-- /bin/sh /usr/local/www/xymon/client/bin/xymonclient.sh 85668 85663 xymon 05:43 S 68 0.0 0:00.00 0.1 2208 13376 | `-- /bin/sh /usr/local/www/xymon/client/bin/xymonclient-freebsd.sh 85691 85668 xymon 05:43 R 88 0.0 0:00.00 0.1 2548 13452 | `-- ps -axd -ww -o pid,ppid,user,start,state,pri,pcpu,cputime,pmem,rss,vsz,command 805 1 zabbix Tue06 I 68 0.0 0:00.00 0.1 5000 20728 |-- /usr/local/sbin/zabbix_agentd -c /usr/local/etc/zabbix6/zabbix_agentd.conf 809 805 zabbix Tue06 S 20 0.0 0:14.42 0.1 5372 20728 | |-- zabbix_agentd: collector [idle 1 sec] (zabbix_agentd) 810 805 zabbix Tue06 I 68 0.0 0:00.00 0.1 5408 20864 | |-- zabbix_agentd: listener #1 [waiting for connection] (zabbix_agentd) 812 805 zabbix Tue06 I 68 0.0 0:00.00 0.1 5404 20864 | |-- zabbix_agentd: listener #2 [waiting for connection] (zabbix_agentd) 813 805 zabbix Tue06 I 68 0.0 0:00.00 0.1 5420 20864 | |-- zabbix_agentd: listener #3 [waiting for connection] (zabbix_agentd) 814 805 zabbix Tue06 S 20 0.0 0:10.47 0.1 5648 20864 | |-- zabbix_agentd: active checks #1 [idle 1 sec] (zabbix_agentd) 815 805 zabbix Tue06 S 20 0.0 0:10.50 0.1 5648 20864 | `-- zabbix_agentd: active checks #2 [idle 1 sec] (zabbix_agentd) 827 1 root Tue06 Is 20 0.0 0:00.35 0.0 1960 12916 |-- /usr/sbin/cron -s 859 1 root Tue06 Ss 24 0.0 0:01.76 0.1 4856 22832 |-- sshd: /usr/sbin/sshd [listener] 1 of 10-100 startups (sshd) 85661 859 root 05:43 Ss 24 0.0 0:00.01 0.2 9376 22904 | `-- sshd: [accepted] (sshd) 85662 85661 sshd 05:43 SC 21 0.0 0:00.00 0.2 9404 22904 | `-- sshd: [net] (sshd) 944 1 root Tue06 Is 20 0.0 0:00.36 0.2 7928 55844 |-- /usr/local/libexec/postfix/master -w 946 944 postfix Tue06 I 20 0.0 0:00.12 0.2 8104 55924 | |-- qmgr -l -t unix -u 82304 944 postfix 04:45 I 20 0.0 0:00.01 0.3 14248 55872 | `-- pickup -l -t unix -u 85339 1 xymon 05:38 I 68 0.0 0:00.00 0.1 2196 13376 |-- sh -c vmstat 300 2 1>/usr/local/www/xymon/client/tmp/xymon_vmstat.ns1.legatech.ch.85313 2>&1; mv /usr/local/www/xymon/client/tmp/xymon_vmstat.ns1.legatech.ch.85313 /usr/local/www/xymon/client/tmp/xymon_vmstat.ns1.legatech.ch 85341 85339 xymon 05:38 I 68 0.0 0:00.01 0.1 2364 13228 | `-- vmstat 300 2 99098 1 root 06:14 Is+ 20 0.0 0:00.00 0.0 1660 12844 |-- /usr/libexec/getty Pc ttyv0 968 1 root Tue06 Is+ 68 0.0 0:00.00 0.0 1664 12844 |-- /usr/libexec/getty Pc ttyv1 969 1 root Tue06 Is+ 68 0.0 0:00.00 0.0 1660 12844 |-- /usr/libexec/getty Pc ttyv2 970 1 root Tue06 Is+ 68 0.0 0:00.00 0.0 1668 12844 |-- /usr/libexec/getty Pc ttyv3 971 1 root Tue06 Is+ 68 0.0 0:00.00 0.0 1664 12844 |-- /usr/libexec/getty Pc ttyv4 972 1 root Tue06 Is+ 68 0.0 0:00.00 0.0 1664 12844 |-- /usr/libexec/getty Pc ttyv5 973 1 root Tue06 Is+ 68 0.0 0:00.00 0.0 1668 12844 |-- /usr/libexec/getty Pc ttyv6 974 1 root Tue06 Is+ 68 0.0 0:00.00 0.0 1664 12844 `-- /usr/libexec/getty Pc ttyv7 2 0 root Tue06 WL -60 0.0 0:19.66 0.0 64 0 - [clock] 3 0 root Tue06 DL -16 0.0 0:00.00 0.0 80 0 - [crypto] 4 0 root Tue06 DL -16 0.0 0:00.22 0.0 48 0 - [cam] 5 0 root Tue06 DL -60 0.0 0:00.00 0.0 16 0 - [busdma] 6 0 root Tue06 DL -16 0.0 0:06.46 0.0 16 0 - [rand_harvestq] 7 0 root Tue06 DL -16 0.0 0:13.63 0.0 48 0 - [pagedaemon] 8 0 root Tue06 DL -16 0.0 0:00.00 0.0 16 0 - [vmdaemon] 9 0 root Tue06 DL -16 0.0 0:07.65 0.0 64 0 - [bufdaemon] 10 0 root Tue06 DL -16 0.0 0:00.00 0.0 16 0 - [audit] 11 0 root Tue06 RNL 187 400.0 11352:44.79 0.0 64 0 - [idle] 12 0 root Tue06 WL -60 0.0 0:20.30 0.0 272 0 - [intr] 13 0 root Tue06 DL -8 0.0 0:00.00 0.0 48 0 - [geom] 14 0 root Tue06 DL -60 0.0 0:01.89 0.0 80 0 - [usb] 15 0 root Tue06 DL 20 0.0 0:01.21 0.0 16 0 - [vnlru] 16 0 root Tue06 DL 16 0.0 0:14.64 0.0 16 0 - [syncer] [nproc] 4 [top] last pid: 85693; load averages: 0.37, 0.26, 0.19 up 1+23:38:52 05:43:52 33 processes: 1 running, 32 sleeping CPU: 0.1% user, 0.0% nice, 0.1% system, 0.0% interrupt, 99.9% idle Mem: 49M Active, 3082M Inact, 27M Laundry, 626M Wired, 339M Buf, 161M Free Swap: 1023M Total, 1023M Free PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND 689 bind 14 68 0 103M 27M sigwai 2 0:30 0.00% named 809 zabbix 1 20 0 20M 5372K nanslp 1 0:14 0.00% zabbix_agentd 815 zabbix 1 20 0 20M 5648K nanslp 1 0:10 0.00% zabbix_agentd 814 zabbix 1 20 0 20M 5648K nanslp 2 0:10 0.00% zabbix_agentd 761 root 1 20 0 22M 4688K select 2 0:09 0.00% ntpd 764 root 1 20 0 27M 14M select 0 0:08 0.00% perl 859 root 1 24 0 22M 4856K select 3 0:02 0.00% sshd 674 root 1 1 0 13M 2144K select 3 0:01 0.00% syslogd 791 xymon 1 20 0 12M 1800K nanslp 2 0:01 0.00% xymonlaunch 944 root 1 20 0 55M 7928K kqread 0 0:00 0.00% master 827 root 1 20 0 13M 1960K nanslp 1 0:00 0.00% cron 946 postfix 1 20 0 55M 8104K kqread 3 0:00 0.00% qmgr 416 root 1 20 0 14M 2676K select 3 0:00 0.00% devd 85661 root 1 24 0 22M 9376K select 1 0:00 0.00% sshd 82304 postfix 1 20 0 55M 14M kqread 2 0:00 0.00% pickup 85341 xymon 1 68 0 13M 2364K nanslp 3 0:00 0.00% vmstat 812 zabbix 1 68 0 20M 5404K select 3 0:00 0.00% zabbix_agentd 810 zabbix 1 68 0 20M 5408K select 3 0:00 0.00% zabbix_agentd 813 zabbix 1 68 0 20M 5420K select 3 0:00 0.00% zabbix_agentd 805 zabbix 1 68 0 20M 5000K wait 3 0:00 0.00% zabbix_agentd [vmstat] procs memory page disks faults cpu r b w avm fre flt re pi po fr sr vtb0 in sy cs us sy id 0 0 0 543272960 171958272 258 0 0 0 307 31 0 7 354 115 0 0 99 1 0 0 589574144 168620032 319 0 0 0 362 20 0 4 334 111 0 0 99 [msgs:/var/log/messages] <...CURRENT...> Nov 21 05:40:35 ns1 kernel: arp: 172.19.11.1 moved from 0c:c4:7a:97:e5:e5 to 0c:c4:7a:97:e9:45 on vtnet0 Nov 21 05:42:38 ns1 sshd[85599]: error: maximum authentication attempts exceeded for root from 82.65.183.225 port 51452 ssh2 [preauth] Nov 21 05:42:41 ns1 sshd[85601]: error: maximum authentication attempts exceeded for root from 82.65.183.225 port 51600 ssh2 [preauth] Nov 21 05:42:43 ns1 sshd[85603]: error: maximum authentication attempts exceeded for root from 82.65.183.225 port 51804 ssh2 [preauth] Nov 21 05:42:46 ns1 sshd[85607]: error: maximum authentication attempts exceeded for invalid user admin from 82.65.183.225 port 52066 ssh2 [preauth] Nov 21 05:42:49 ns1 sshd[85609]: error: maximum authentication attempts exceeded for invalid user admin from 82.65.183.225 port 52262 ssh2 [preauth] Nov 21 05:42:53 ns1 sshd[85613]: error: maximum authentication attempts exceeded for invalid user oracle from 82.65.183.225 port 52678 ssh2 [preauth] Nov 21 05:42:55 ns1 sshd[85615]: error: maximum authentication attempts exceeded for invalid user oracle from 82.65.183.225 port 52798 ssh2 [preauth] Nov 21 05:43:00 ns1 sshd[85619]: error: maximum authentication attempts exceeded for invalid user usuario from 82.65.183.225 port 53062 ssh2 [preauth] Nov 21 05:43:02 ns1 sshd[85621]: error: maximum authentication attempts exceeded for invalid user usuario from 82.65.183.225 port 53322 ssh2 [preauth] Nov 21 05:43:13 ns1 sshd[85627]: error: maximum authentication attempts exceeded for invalid user test from 82.65.183.225 port 53710 ssh2 [preauth] Nov 21 05:43:15 ns1 sshd[85629]: error: maximum authentication attempts exceeded for invalid user test from 82.65.183.225 port 54082 ssh2 [preauth] Nov 21 05:43:21 ns1 sshd[85633]: error: maximum authentication attempts exceeded for invalid user user from 82.65.183.225 port 54486 ssh2 [preauth] Nov 21 05:43:22 ns1 sshd[85635]: error: maximum authentication attempts exceeded for invalid user user from 82.65.183.225 port 54612 ssh2 [preauth] Nov 21 05:43:25 ns1 sshd[85639]: error: maximum authentication attempts exceeded for invalid user ftpuser from 82.65.183.225 port 54858 ssh2 [preauth] Nov 21 05:43:29 ns1 sshd[85641]: error: maximum authentication attempts exceeded for invalid user ftpuser from 82.65.183.225 port 54994 ssh2 [preauth] Nov 21 05:43:33 ns1 sshd[85645]: error: maximum authentication attempts exceeded for invalid user test1 from 82.65.183.225 port 55422 ssh2 [preauth] Nov 21 05:43:37 ns1 sshd[85647]: error: maximum authentication attempts exceeded for invalid user test1 from 82.65.183.225 port 55594 ssh2 [preauth] Nov 21 05:43:42 ns1 sshd[85651]: error: maximum authentication attempts exceeded for invalid user test2 from 82.65.183.225 port 56078 ssh2 [preauth] Nov 21 05:43:44 ns1 sshd[85653]: error: maximum authentication attempts exceeded for invalid user test2 from 82.65.183.225 port 56250 ssh2 [preauth] Nov 21 05:43:51 ns1 sshd[85659]: error: maximum authentication attempts exceeded for invalid user ubuntu from 82.65.183.225 port 56796 ssh2 [preauth] Nov 21 05:43:52 ns1 sshd[85661]: error: maximum authentication attempts exceeded for invalid user ubuntu from 82.65.183.225 port 56916 ssh2 [preauth] [logfile:/var/log/messages] type:100000 (file) mode:644 (-rw-r--r--) linkcount:1 owner:0 (root) group:0 (wheel) size:976189 clock:1732164237 (2024/11/21-05:43:57) atime:1732164237 (2024/11/21-05:43:57) ctime:1732164232 (2024/11/21-05:43:52) mtime:1732164232 (2024/11/21-05:43:52) [clientversion] Xymon version 4.3.30 [clock] epoch: 1732164237.292440 local: 2024-11-21 05:43:57 CET UTC: 2024-11-21 04:43:57 UTC