################### Logwatch 7.4.0 (03/01/11) #################### Processing Initiated: Fri Dec 23 04:42:04 2022 Date Range Processed: yesterday ( 2022-Dec-22 ) Period is day. Detail Level of Output: 0 Type of Output/Format: mail / text Logfiles for Host: h2361197.stratoserver.net ################################################################## --------------------- fail2ban-messages Begin ------------------------ Banned services with Fail2Ban: Bans:Unbans ssh: [335:337] ---------------------- fail2ban-messages End ------------------------- --------------------- httpd Begin ------------------------ Connection attempts using mod_proxy: 192.30.243.7 -> zapf.wiki:443: 1 Time(s) A total of 15 sites probed the server 107.189.5.223 152.32.150.117 157.245.70.205 161.35.236.158 162.243.135.15 167.172.98.139 167.71.102.95 185.142.236.40 185.7.214.218 194.55.186.124 205.185.127.238 45.55.0.17 45.55.192.138 66.240.205.34 89.163.212.21 Requests with error response codes 400 Bad Request null: 23 Time(s) /: 6 Time(s) *: 4 Time(s) mstshash=Administr: 4 Time(s) mstshash=Domain: 4 Time(s) /.env: 2 Time(s) /admin/console/: 2 Time(s) /cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%% ... %%32%%65/bin/sh: 2 Time(s) +\xB9\xD1@\xA4\xBE\x94b\xC5Z0,\xE8\xC0\x81 ... x09\xC0\x14\xC0: 1 Time(s) /c/version.js: 1 Time(s) /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh: 1 Time(s) /flu/403.html: 1 Time(s) /stalker_portal/c/version.js: 1 Time(s) /stream/live.php: 1 Time(s) /streaming/clients_live.php: 1 Time(s) /system_api.php: 1 Time(s) /w00tw00t.at.ISC.SANS.DFind:): 1 Time(s) 7^\xC4\xBA\xD7\xE2\x1A%\xE1:f\x00\x00\x1A\ ... x09\xC0\x14\xC0: 1 Time(s) ?\x9Dz\xEFh\xA9\xF8\x85Ey\x0B': 1 Time(s) \xA4\xE0\x00T!\x03>\x12: 1 Time(s) \xC0/\xC00\xC0+\xC0,\xCC\xA8\xCC\xA9\xC0\x ... x09\xC0\x14\xC0: 1 Time(s) \xCD\x1Fm\xD4\xE4\x08\xAEe\xA5\xAE!\xA8\xE ... x09\xC0\x13\xC0: 1 Time(s) zapf.wiki:443: 1 Time(s) 500 Internal Server Error /: 26 Time(s) /favicon.ico: 7 Time(s) /robots.txt: 5 Time(s) /.env: 4 Time(s) /remote/fgt_lang?lang=/../../../..//////// ... lvpn_websession: 3 Time(s) /ab2g: 2 Time(s) /ab2h: 2 Time(s) /sitemap.xml: 2 Time(s) /.git/config: 1 Time(s) /.well-known/security.txt: 1 Time(s) /actuator/health: 1 Time(s) /autodiscover/autodiscover.json?@zdi/Powershell: 1 Time(s) /c/version.js: 1 Time(s) /ecp/Current/exporttool/microsoft.exchange ... ool.application: 1 Time(s) /flu/403.html: 1 Time(s) /login: 1 Time(s) /owa/auth/logon.aspx: 1 Time(s) /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f: 1 Time(s) /owa/auth/x.js: 1 Time(s) /showLogin.cc: 1 Time(s) /stalker_portal/c/version.js: 1 Time(s) /stream/live.php: 1 Time(s) /streaming/clients_live.php: 1 Time(s) /system_api.php: 1 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: root (61.177.173.11): 413 Time(s) root (61.177.173.2): 103 Time(s) unknown (109.107.166.161): 93 Time(s) root (195.226.194.242): 63 Time(s) root (195.226.194.142): 46 Time(s) root (61.177.173.61): 42 Time(s) unknown (185.81.68.99): 42 Time(s) unknown (45.93.201.90): 39 Time(s) root (61.177.172.61): 36 Time(s) root (61.177.173.56): 36 Time(s) root (211.37.174.62): 30 Time(s) root (61.177.172.76): 30 Time(s) root (61.83.148.111): 30 Time(s) root (host-79-2-148-245.business.telecomitalia.it): 30 Time(s) root (109.107.166.161): 29 Time(s) root (123.30.129.179): 26 Time(s) root (176.137.240.35.bc.googleusercontent.com): 26 Time(s) root (42-200-149-223.static.imsbiz.com): 26 Time(s) root (43.135.48.212): 26 Time(s) root (61.177.173.43): 26 Time(s) root (168.232.198.2): 25 Time(s) root (61.177.173.55): 24 Time(s) root (190.191.28.41): 22 Time(s) root (172.247.111.252): 20 Time(s) root (188.254.0.218): 20 Time(s) root (191.243.56.178): 20 Time(s) root (206.189.144.179): 20 Time(s) root (43.134.72.84): 20 Time(s) root (43.154.29.163): 20 Time(s) root (62.28.222.221): 20 Time(s) root (bba183318.alshamil.net.ae): 20 Time(s) root (mi-asahi.co.jp): 20 Time(s) root (103.242.199.145): 19 Time(s) root (104.225.159.240.16clouds.com): 19 Time(s) root (194.5.177.105): 19 Time(s) root (31.220.17.100): 19 Time(s) root (103.46.238.142): 18 Time(s) root (104.194.225.102): 18 Time(s) root (118.34.14.126): 18 Time(s) root (123.31.32.162): 18 Time(s) root (146.190.79.123): 18 Time(s) root (195.239.91.210): 18 Time(s) root (197.248.117.226): 18 Time(s) root (20.26.240.87): 18 Time(s) root (203.113.167.3): 18 Time(s) root (206.189.145.158): 18 Time(s) root (206.81.9.31): 18 Time(s) root (209.97.186.17): 18 Time(s) root (212-83-144-11.rev.poneytelecom.eu): 18 Time(s) root (218.253.135.33): 18 Time(s) root (43.131.29.54): 18 Time(s) root (45.35.180.57): 18 Time(s) root (60-199-224-2.static.tfn.net.tw): 18 Time(s) root (83.0.114.127.internetdsl.tpnet.pl): 18 Time(s) root (89.215.210.114): 18 Time(s) root (cpe-76-95-32-130.socal.res.rr.com): 18 Time(s) root (db.accessdrive.net): 18 Time(s) root (139.59.126.129): 17 Time(s) root (149.5.172.244): 17 Time(s) root (156.236.74.209): 17 Time(s) root (159.223.167.92): 17 Time(s) root (188.166.240.186): 17 Time(s) root (194.5.159.228): 17 Time(s) root (23.94.211.101): 17 Time(s) root (3.90.241.35.bc.googleusercontent.com): 17 Time(s) root (43.153.9.127): 17 Time(s) root (ip145.ip-198-50-173.net): 17 Time(s) root (v133-130-98-176.a027.g.tyo1.static.cnode.io): 17 Time(s) root (vps-34275349.vps.ovh.net): 17 Time(s) root (101.128.68.195): 16 Time(s) root (117.6.86.134): 16 Time(s) root (142.93.65.9): 16 Time(s) root (159.223.38.244): 16 Time(s) root (178.128.102.42): 16 Time(s) root (178.128.115.173): 16 Time(s) root (188.166.225.123): 16 Time(s) root (190.0.246.7): 16 Time(s) root (193.151.128.81): 16 Time(s) root (212.92.4.146.static.wline.lns.sme.cust.swisscom.ch): 16 Time(s) root (43.135.154.212): 16 Time(s) root (47.176.104.76): 16 Time(s) root (87.117.25.126): 16 Time(s) root (ec2-13-232-156-110.ap-south-1.compute.amazonaws.com): 16 Time(s) root (167.71.219.49): 15 Time(s) root (local152.com.mx): 15 Time(s) unknown (162.218.126.136): 15 Time(s) root (112.87.237.35.bc.googleusercontent.com): 14 Time(s) root (126.ip-144-217-243.net): 14 Time(s) root (147.182.205.245): 14 Time(s) root (164.92.159.65): 14 Time(s) root (188.68.31.75): 14 Time(s) root (43.153.179.44): 14 Time(s) root (43.153.52.107): 14 Time(s) root (43.157.8.248): 14 Time(s) root (45.13.58.103): 14 Time(s) root (radiomexdental.com): 14 Time(s) root (vps-fa5d8695.vps.ovh.net): 14 Time(s) root (112.132.249.164): 13 Time(s) root (183.187.75.102): 13 Time(s) root (221.131.141.163): 13 Time(s) root (91.197.1.141): 13 Time(s) root (104.28.217.42): 12 Time(s) root (159.65.205.178): 12 Time(s) root (205.134.184.122): 12 Time(s) root (61.177.173.42): 12 Time(s) root (sbj-213-248.tm.net.my): 12 Time(s) unknown (91.212.166.22): 12 Time(s) root (60.51.17.33): 11 Time(s) unknown (185.122.204.242): 11 Time(s) root (fttx.cable-17712253.predialnet.com.br): 10 Time(s) root (8.21.13.51): 9 Time(s) root (143.244.179.235): 8 Time(s) root (185.81.68.99): 8 Time(s) root (104.28.249.43): 7 Time(s) root (115.133.237.161): 7 Time(s) unknown (92.46.108.20): 7 Time(s) unknown (bzq-84-110-99-202.red.bezeqint.net): 7 Time(s) root (117.156.64.16): 6 Time(s) root (122.97.229.210): 6 Time(s) root (185.122.204.242): 6 Time(s) root (27.71.27.143): 6 Time(s) root (61.177.172.87): 6 Time(s) root (broadband-84-42-28-190.atc.tvcom.ru): 6 Time(s) unknown (141.98.11.30): 6 Time(s) unknown (bzq-84-110-99-202.cablep.bezeqint.net): 6 Time(s) root (177.103.177.24): 5 Time(s) unknown (141.98.10.158): 5 Time(s) unknown (173-165-190-177-atlanta.hfc.comcastbusiness.net): 5 Time(s) unknown (81.17.25.50): 4 Time(s) unknown (ec2-65-2-28-105.ap-south-1.compute.amazonaws.com): 4 Time(s) root (36.79.151.159): 3 Time(s) root (103.90.228.201): 2 Time(s) root (104.28.249.42): 2 Time(s) root (141.98.10.158): 2 Time(s) root (162.218.126.136): 2 Time(s) root (92.46.108.20): 2 Time(s) root (bzq-84-110-99-202.red.bezeqint.net): 2 Time(s) sshd (109.107.166.161): 2 Time(s) unknown (170.253.14.111): 2 Time(s) unknown (183.187.75.102): 2 Time(s) unknown (193.169.255.30): 2 Time(s) unknown (43.153.179.44): 2 Time(s) backup (109.107.166.161): 1 Time(s) mysql (109.107.166.161): 1 Time(s) nobody (109.107.166.161): 1 Time(s) postgres (109.107.166.161): 1 Time(s) root (106.10.122.53): 1 Time(s) root (150.188.18.158): 1 Time(s) root (189.109.37.54): 1 Time(s) root (189.254.255.3): 1 Time(s) root (201.18.92.46): 1 Time(s) root (202-171-188-56.ip4.superloop.com): 1 Time(s) root (209.14.69.163): 1 Time(s) root (209.141.55.27): 1 Time(s) root (41.197.31.178): 1 Time(s) root (42.115.56.120): 1 Time(s) root (47.88.5.136): 1 Time(s) root (bzq-84-110-99-202.cablep.bezeqint.net): 1 Time(s) root (c-71-230-29-108.hsd1.pa.comcast.net): 1 Time(s) root (dns1.budanta.com): 1 Time(s) root (ec2-65-2-28-105.ap-south-1.compute.amazonaws.com): 1 Time(s) sshd (185.81.68.99): 1 Time(s) unknown (047-039-114-117.res.spectrum.com): 1 Time(s) unknown (1-36-40-138.ptr.netvigator.com): 1 Time(s) unknown (103.140.31.54): 1 Time(s) unknown (103.152.40.2): 1 Time(s) unknown (104.225.159.240.16clouds.com): 1 Time(s) unknown (115.247.12.242): 1 Time(s) unknown (123.142.199.134): 1 Time(s) unknown (124.197.101.178): 1 Time(s) unknown (134.122.90.159): 1 Time(s) unknown (167.71.219.49): 1 Time(s) unknown (172.82.14.114): 1 Time(s) unknown (175.184.248.149): 1 Time(s) unknown (181.209.231.253): 1 Time(s) unknown (189.56.190.63): 1 Time(s) unknown (190.6.202.226): 1 Time(s) unknown (195.226.194.242): 1 Time(s) unknown (200.217.195.214): 1 Time(s) unknown (201.91.101.26): 1 Time(s) unknown (204.9.181.31): 1 Time(s) unknown (209.222.184.227): 1 Time(s) unknown (212.92.4.146.static.wline.lns.sme.cust.swisscom.ch): 1 Time(s) unknown (213.248.166.145): 1 Time(s) unknown (41.215.220.184): 1 Time(s) unknown (45.5.209.124): 1 Time(s) unknown (47.88.5.136): 1 Time(s) unknown (60-251-36-30.hinet-ip.hinet.net): 1 Time(s) unknown (65.76.215.218): 1 Time(s) unknown (74.213.234.86): 1 Time(s) unknown (81.25.207.62): 1 Time(s) unknown (91.197.1.141): 1 Time(s) unknown (95.35.31.118): 1 Time(s) unknown (ua-84-216-197-36.bbcust.telenor.se): 1 Time(s) www-data (109.107.166.161): 1 Time(s) Invalid Users: Unknown Account: 352 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 3 Miscellaneous warnings 23.326K Bytes accepted 23,886 23.326K Bytes sent via SMTP 23,886 ======== ================================================== 1 Accepted 100.00% -------- -------------------------------------------------- 1 Total 100.00% ======== ================================================== 4 4xx Reject relay denied 100.00% -------- -------------------------------------------------- 4 Total 4xx Rejects 100.00% ======== ================================================== 81 Connections 7 Connections lost (inbound) 81 Disconnections 1 Removed from queue 1 Sent via SMTP 1 Hostname verification errors (FCRDNS) ---------------------- Postfix End ------------------------- --------------------- sendmail-largeboxes (large mail spool files) Begin ------------------------ Large Mailbox threshold: 40MB (41943040 bytes) Warning: Large mailbox: mailman.gz (1747199807) Warning: Large mailbox: mailman (235703599967) ---------------------- sendmail-largeboxes (large mail spool files) End ------------------------- --------------------- SSHD Begin ------------------------ Disconnecting after too many authentication failures for user: invalid : 1 Time(s) root : 36 Time(s) Failed logins from: 8.21.13.51: 9 times 13.232.156.110 (ec2-13-232-156-110.ap-south-1.compute.amazonaws.com): 16 times 20.26.240.87: 18 times 23.94.211.101 (23-94-211-101-host.colocrossing.com): 17 times 27.71.27.143: 6 times 31.220.17.100: 19 times 35.237.87.112 (112.87.237.35.bc.googleusercontent.com): 14 times 35.240.137.176 (176.137.240.35.bc.googleusercontent.com): 26 times 35.241.90.3 (3.90.241.35.bc.googleusercontent.com): 17 times 36.79.151.159: 3 times 41.197.31.178: 1 time 42.115.56.120: 1 time 42.200.149.223 (42-200-149-223.static.imsbiz.com): 26 times 43.131.29.54: 18 times 43.134.72.84: 20 times 43.135.48.212: 26 times 43.135.154.212: 16 times 43.153.9.127: 17 times 43.153.52.107: 14 times 43.153.179.44: 14 times 43.154.29.163: 20 times 43.157.8.248: 14 times 45.13.58.103: 14 times 45.35.180.57: 18 times 47.88.5.136: 1 time 47.176.104.76: 16 times 60.51.17.33: 11 times 60.199.224.2 (60-199-224-2.static.tfn.net.tw): 18 times 61.83.148.111: 30 times 61.177.172.61: 36 times 61.177.172.76: 30 times 61.177.172.87: 6 times 61.177.173.2: 111 times 61.177.173.11: 445 times 61.177.173.42: 12 times 61.177.173.43: 30 times 61.177.173.55: 24 times 61.177.173.56: 36 times 61.177.173.61: 42 times 62.28.222.221: 20 times 65.2.28.105 (ec2-65-2-28-105.ap-south-1.compute.amazonaws.com): 1 time 67.207.85.118 (db.accessdrive.net): 18 times 71.230.29.108 (c-71-230-29-108.hsd1.pa.comcast.net): 1 time 76.95.32.130 (cpe-76-95-32-130.socal.res.rr.com): 18 times 79.2.148.245 (host-79-2-148-245.business.telecomitalia.it): 30 times 83.0.114.127 (83.0.114.127.internetdsl.tpnet.pl): 18 times 84.42.28.190 (broadband-84-42-28-190.atc.tvcom.ru): 6 times 84.110.99.202 (bzq-84-110-99-202.red.bezeqint.net): 3 times 87.117.25.126 (126.25.117.87.donpac.ru): 16 times 89.215.210.114 (unknown.interbgc.com): 18 times 91.197.1.141: 13 times 92.46.108.20: 2 times 101.128.68.195: 16 times 103.13.40.2 (dns1.budanta.com): 1 time 103.46.238.142 (axntech-dynamic-142.238.46.103.axntechnologies.in): 18 times 103.90.228.201: 2 times 103.242.199.145 (node-103-242-199-145.alliancebroadband.in): 19 times 104.28.217.42: 12 times 104.28.249.42: 2 times 104.28.249.43: 7 times 104.194.225.102 (102-225-194-104-dedicated.multacom.com): 18 times 104.225.159.240 (104.225.159.240.16clouds.com): 19 times 106.10.122.53: 1 time 109.107.166.161: 36 times 112.132.249.164 (164.249.132.112.adsl-pool.ah.cnuninet.net): 13 times 115.133.237.161: 7 times 117.6.86.134: 16 times 117.156.64.16: 6 times 118.27.30.17 (mi-asahi.co.jp): 20 times 118.34.14.126: 18 times 122.97.229.210: 6 times 123.30.129.179 (rs179-129.v-1000.com): 26 times 123.31.32.162 (static.vnpt.vn): 18 times 133.130.98.176 (v133-130-98-176.a027.g.tyo1.static.cnode.io): 17 times 139.59.126.129: 17 times 141.95.160.128 (vps-fa5d8695.vps.ovh.net): 14 times 141.98.10.158: 2 times 142.93.65.9: 16 times 143.244.179.235: 8 times 144.126.210.207 (local152.com.mx): 15 times 144.217.243.126 (126.ip-144-217-243.net): 14 times 146.4.92.212 (212.92.4.146.static.wline.lns.sme.cust.swisscom.ch): 16 times 146.190.79.123: 18 times 147.182.205.245: 14 times 149.5.172.244: 17 times 150.188.18.158: 1 time 152.228.131.35 (vps-34275349.vps.ovh.net): 17 times 156.236.74.209: 17 times 159.65.205.178: 12 times 159.223.38.244: 16 times 159.223.167.92: 17 times 162.218.126.136: 2 times 164.92.159.65: 14 times 165.227.204.174 (radiomexdental.com): 14 times 167.71.219.49: 15 times 168.232.198.2 (2-198-232-168.konectivatelecomunicacoes.com.br): 25 times 172.247.111.252: 20 times 177.12.2.53 (fttx.cable-17712253.predialnet.com.br): 10 times 177.103.177.24 (177-103-177-24.dsl.telesp.net.br): 5 times 178.128.102.42: 16 times 178.128.115.173: 16 times 183.187.75.102 (102.75.187.183.adsl-pool.sx.cn): 13 times 185.81.68.99: 9 times 185.122.204.242: 6 times 188.68.31.75: 14 times 188.166.225.123 (linkth.me): 16 times 188.166.240.186: 17 times 188.254.0.218: 20 times 189.109.37.54 (189-109-37-54.customer.tdatabrasil.net.br): 1 time 189.254.255.3 (customer-189-254-255-3-sta.uninet-ide.com.mx): 1 time 190.0.246.7 (mail8.villavicencio.gov.co): 16 times 190.191.28.41 (41-28-191-190.cab.prima.net.ar): 22 times 191.243.56.178: 20 times 193.151.128.81: 16 times 194.5.159.228: 17 times 194.5.177.105: 19 times 195.226.194.142: 46 times 195.226.194.242: 63 times 195.239.91.210: 18 times 197.248.117.226 (197-248-117-226.safaricombusiness.co.ke): 18 times 198.50.173.145 (ip145.ip-198-50-173.net): 17 times 201.18.92.46 (20118092046.host.telemar.net.br): 1 time 202.171.188.56: 1 time 202.188.213.248 (sbj-213-248.tm.net.my): 12 times 203.113.167.3: 18 times 205.134.184.122: 12 times 206.81.9.31: 18 times 206.189.144.179: 20 times 206.189.145.158: 18 times 209.14.69.163 (rotativatransp.com.br): 1 time 209.97.186.17: 18 times 209.141.55.27 (mta2.ohne-rezept-bestellen.info): 1 time 211.37.174.62: 30 times 212.83.144.11 (212-83-144-11.rev.poneytelecom.eu): 18 times 217.165.6.184 (bba183318.alshamil.net.ae): 20 times 218.253.135.33 (static.reserve.wtt.net.hk): 18 times 221.131.141.163: 13 times Illegal users from: 2001:470:1:c84::16: 1 time 2001:470:1:c84::31: 1 time undef: 105 times 1.36.40.138 (1-36-40-138.ptr.netvigator.com): 1 time 34.139.14.67 (67.14.139.34.bc.googleusercontent.com): 9 times 41.215.220.184 (bl2.41.215.220.184.dynamic.dsl.cvmultimedia.cv): 1 time 43.153.179.44: 2 times 45.5.209.124 (ip-45-5-209-124.uplineinternet.net.br): 1 time 45.93.201.90: 39 times 47.39.114.117 (047-039-114-117.res.spectrum.com): 1 time 47.88.5.136: 1 time 60.251.36.30 (60-251-36-30.hinet-ip.hinet.net): 1 time 64.62.197.185 (scan-42d.shadowserver.org): 1 time 65.2.28.105 (ec2-65-2-28-105.ap-south-1.compute.amazonaws.com): 4 times 65.76.215.218: 1 time 74.213.234.86: 1 time 81.17.25.50 (hostedby.privatealps.net): 7 times 81.25.207.62: 1 time 84.110.99.202 (bzq-84-110-99-202.red.bezeqint.net): 13 times 84.216.197.36 (ua-84-216-197-36.bbcust.telenor.se): 1 time 91.197.1.141: 1 time 91.212.166.22: 60 times 92.46.108.20: 7 times 95.35.31.118: 1 time 103.140.31.54: 1 time 103.152.40.2: 1 time 104.225.159.240 (104.225.159.240.16clouds.com): 1 time 109.107.166.161: 93 times 115.247.12.242: 1 time 123.142.199.134: 1 time 124.197.101.178 (178.101.197.124.unknown.m1.com.sg): 1 time 134.122.90.159: 1 time 141.98.10.158: 5 times 141.98.11.30 (srv-141-98-11-30.serveroffer.net): 6 times 146.4.92.212 (212.92.4.146.static.wline.lns.sme.cust.swisscom.ch): 1 time 162.218.126.136: 15 times 167.71.219.49: 1 time 170.253.14.111: 2 times 172.82.14.114: 1 time 173.165.190.177 (173-165-190-177-atlanta.hfc.comcastbusiness.net): 6 times 175.184.248.149: 1 time 181.209.231.253 (253.231.209.181.static.intelnet.net.gt): 1 time 183.187.75.102 (102.75.187.183.adsl-pool.sx.cn): 2 times 185.81.68.99: 42 times 185.122.204.242: 11 times 189.56.190.63 (189-56-190-63.customer.tdatabrasil.net.br): 1 time 190.6.202.226 (190-6-202-226.reverse.cablecolor.hn): 1 time 193.169.255.30: 10 times 195.226.194.242: 1 time 200.217.195.214: 1 time 201.91.101.26 (201-91-101-26.customer.tdatabrasil.net.br): 1 time 204.9.181.31: 1 time 209.222.184.227: 1 time 213.248.166.145: 1 time **Unmatched Entries** Disconnecting: Change of username or service not allowed: (cameras,ssh-connection) -> (,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (,ssh-connection) -> (admin,ssh-connection) [preauth] : 2 time(s) fatal: no matching cipher found: client aes128-cbc,3des-cbc,aes256-cbc,aes192-cbc server aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth] : 2 time(s) Protocol major versions differ for 128.14.226.202: SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3 vs. SSH-1.5-Server : 1 time(s) Disconnecting: Change of username or service not allowed: (admin,ssh-connection) -> (cameras,ssh-connection) [preauth] : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/ploop48368p1 394G 243G 132G 65% / none 4.0G 0 4.0G 0% /dev ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################