Jul 18 21:28:07 pfSense sshd[30342]: error: Fssh_kex_exchange_identification: Connection closed by remote host Jul 18 21:28:16 pfSense sshd[30438]: error: Fssh_kex_exchange_identification: Connection closed by remote host Jul 18 21:28:23 pfSense sshd[31728]: Unable to negotiate with 10.0.8.2 port 51890: no matching host key type found. Their offer: ssh-rsa [preauth] Jul 18 21:28:23 pfSense sshguard[863]: Attack from "10.0.8.2" on service SSH with danger 10. Jul 18 21:28:27 pfSense sshd[42506]: error: Fssh_kex_exchange_identification: Connection closed by remote host Jul 18 21:28:43 pfSense sshd[53161]: Unable to negotiate with 10.0.8.2 port 53612: no matching host key type found. Their offer: ssh-rsa [preauth] Jul 18 21:28:43 pfSense sshguard[863]: Attack from "10.0.8.2" on service SSH with danger 10. Jul 18 21:28:46 pfSense sshd[60807]: Unable to negotiate with 10.0.8.2 port 57598: no matching host key type found. Their offer: ssh-rsa [preauth] Jul 18 21:28:46 pfSense sshguard[863]: Attack from "10.0.8.2" on service SSH with danger 10. Jul 18 21:28:46 pfSense sshguard[863]: Blocking "10.0.8.2/32" for 120 secs (4 attacks in 852 secs, after 1 abuses over 852 secs.) Jul 18 21:29:00 pfSense sshguard[863]: Exiting on signal. Jul 18 21:29:00 pfSense sshguard[62978]: Now monitoring attacks. Jul 18 21:29:46 pfSense sshd[55090]: process_output: ssh_packet_write_poll: Connection from user root 10.0.8.2 port 51318: Permission denied Jul 18 21:30:00 pfSense sshguard[62978]: Exiting on signal. Jul 18 21:30:00 pfSense sshguard[4757]: Now monitoring attacks. Jul 18 21:31:00 pfSense sshguard[4757]: Exiting on signal. Jul 18 21:31:00 pfSense sshguard[35213]: Now monitoring attacks. Jul 18 21:32:00 pfSense sshguard[35213]: Exiting on signal. Jul 18 21:32:00 pfSense sshguard[63088]: Now monitoring attacks. Jul 18 21:33:20 pfSense openvpn[86312]: user 'Storm666' authenticated Jul 18 21:35:12 pfSense php-fpm[86312]: /index.php: webConfigurator authentication success for user 'myadmin' from: 10.0.8.2 Jul 18 21:35:12 pfSense sshguard[63088]: Attack from "10.0.8.2" on service unknown service with danger 10. Jul 18 21:35:44 pfSense php-fpm[86312]: /index.php: Successful login for user 'myadmin' from: 10.0.8.2 (Local Database) Jul 18 21:36:22 pfSense sshd[63283]: Accepted keyboard-interactive/pam for myadmin from 10.0.8.2 port 36674 ssh2 Jul 18 21:38:47 pfSense sshd[7711]: Received disconnect from 10.0.8.2 port 36674:11: disconnected by user Jul 18 21:38:47 pfSense sshd[7711]: Disconnected from user myadmin 10.0.8.2 port 36674 Jul 18 21:39:02 pfSense sshd[51580]: Accepted keyboard-interactive/pam for root from 10.0.8.2 port 47578 ssh2