Jul 31 11:05:26 dropbear[2577]: Child connection from 134.89.29.109:54714 Jul 31 11:05:31 dropbear[2577]: Bad password attempt for 'esp' from 134.89.29.109:54714 Jul 31 11:05:36 dropbear[2577]: Bad password attempt for 'esp' from 134.89.29.109:54714 Jul 31 11:05:39 dropbear[2577]: Password auth succeeded for 'esp' from 134.89.29.109:54714 Jul 31 13:50:36 dropbear[2653]: Child connection from 134.89.29.111:57268 Jul 31 13:50:36 dropbear[2653]: Exit before auth from <134.89.29.111:57268>: Exited normally Aug 1 06:51:01 dropbear[2986]: Child connection from 134.89.29.111:55355 Aug 1 06:51:01 dropbear[2986]: Exit before auth from <134.89.29.111:55355>: Exited normally Aug 1 08:53:01 dropbear[3028]: Child connection from 134.89.28.217:55558 Aug 1 08:53:05 dropbear[3028]: Bad password attempt for 'esp' from 134.89.28.217:55558 Aug 1 08:53:09 dropbear[3028]: Bad password attempt for 'esp' from 134.89.28.217:55558 Aug 1 08:53:18 dropbear[3028]: Bad password attempt for 'esp' from 134.89.28.217:55558 Aug 1 08:53:18 dropbear[3028]: Exit before auth from <134.89.28.217:55558>: (user 'esp', 3 fails): Exited normally Aug 1 08:53:22 dropbear[3029]: Child connection from 134.89.28.217:34482 Aug 1 08:53:25 dropbear[3029]: Password auth succeeded for 'esp' from 134.89.28.217:34482 Aug 1 12:40:00 dropbear[2577]: Exit (esp) from <134.89.29.109:54714>: Disconnect received Aug 1 12:40:06 dropbear[3114]: Child connection from 134.89.29.109:47250 Aug 1 12:40:19 dropbear[3114]: Password auth succeeded for 'nadia' from 134.89.29.109:47250 Aug 1 12:41:32 dropbear[3114]: Exit (nadia) from <134.89.29.109:47250>: Disconnect received Aug 1 12:41:40 dropbear[3127]: Child connection from 134.89.29.109:58618 Aug 1 12:41:45 dropbear[3127]: Password auth succeeded for 'nadia' from 134.89.29.109:58618 Aug 1 12:43:23 su: + /dev/pts/4 nadia:root Aug 1 12:45:19 dropbear[3127]: Exit (nadia) from <134.89.29.109:58618>: Disconnect received Aug 1 14:18:34 dropbear[3223]: Child connection from 192.168.5.1:55642 Aug 1 14:18:34 dropbear[3223]: Exit before auth from <192.168.5.1:55642>: Exited normally Aug 1 14:50:49 dropbear[3232]: Child connection from 192.168.5.1:33484 Aug 1 14:50:49 dropbear[3232]: Exit before auth from <192.168.5.1:33484>: Exited normally Aug 1 16:49:20 syslogd started: BusyBox v1.11.2 Aug 1 16:49:20 syslogd exiting Aug 1 16:49:20 syslogd started: BusyBox v1.11.2 Aug 1 16:49:22 kernel: [ 17.96] PPP generic driver version 2.4.2 Aug 1 16:49:22 pppd[710]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 1 16:49:22 pppd[710]: Using interface ppp2 Aug 1 16:49:22 pppd[710]: Connect: ppp2 <--> /dev/platform Aug 1 16:49:25 kernel: [ 21.72] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 1 16:49:25 kernel: [ 21.72] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 1 16:49:27 chronyd[796]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 1 16:49:27 chronyd[796]: Running with root privileges Aug 1 16:49:27 chronyd[796]: Frequency 23.186 +/- 0.071 ppm read from /var/lib/chrony/chrony.drift Aug 1 16:49:27 chronyd[796]: Timezone right/UTC failed leap second check, ignoring Aug 1 16:49:29 dnsmasq[820]: started, version 2.84 cachesize 150 Aug 1 16:49:29 dnsmasq[820]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 1 16:49:29 dnsmasq-tftp[820]: TFTP root is /card/tftp Aug 1 16:49:29 dnsmasq[820]: using only locally-known addresses for domain esp Aug 1 16:49:29 dnsmasq[820]: no servers found in /etc/resolv.conf, will retry Aug 1 16:49:29 dnsmasq[820]: read /etc/hosts - 5 addresses Aug 1 16:49:30 dnsmasq[820]: read /etc/hosts - 6 addresses Aug 1 16:49:31 dnsmasq[820]: read /etc/hosts - 6 addresses Aug 1 16:49:32 dnsmasq[820]: read /etc/hosts - 6 addresses Aug 1 16:49:32 udhcpc[862]: eth0: DHCP bound wired to 134.89.29.121 with DNS 134.89.10.10 134.89.12.87 Aug 1 16:49:32 dnsmasq[820]: reading /etc/resolv.conf Aug 1 16:49:32 dnsmasq[820]: using only locally-known addresses for domain esp Aug 1 16:49:32 dnsmasq[820]: using nameserver 192.168.5.1#53 Aug 1 16:49:33 dnsmasq[820]: reading /etc/resolv.conf Aug 1 16:49:33 dnsmasq[820]: using only locally-known addresses for domain esp Aug 1 16:49:33 dnsmasq[820]: using nameserver 192.168.5.1#53 Aug 1 16:49:33 dnsmasq[820]: read /etc/hosts - 6 addresses Aug 1 16:49:37 rpc.statd[982]: Version 1.1.0 Starting Aug 1 16:49:37 rpc.statd[982]: Flags: Aug 1 16:49:52 pppd[710]: LCP: timeout sending Config-Requests Aug 1 16:50:02 chronyd[796]: Selected source 134.89.2.91 (ESPshore) Aug 1 16:59:14 syslogd started: BusyBox v1.11.2 Aug 1 16:59:14 syslogd exiting Aug 1 16:59:14 syslogd started: BusyBox v1.11.2 Aug 1 16:59:16 kernel: [ 14.60] PPP generic driver version 2.4.2 Aug 1 16:59:16 pppd[707]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 1 16:59:16 pppd[707]: Using interface ppp2 Aug 1 16:59:16 pppd[707]: Connect: ppp2 <--> /dev/platform Aug 1 16:59:19 kernel: [ 18.33] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 1 16:59:19 kernel: [ 18.33] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 1 16:59:21 chronyd[792]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 1 16:59:21 chronyd[792]: Running with root privileges Aug 1 16:59:21 chronyd[792]: Frequency 23.186 +/- 0.071 ppm read from /var/lib/chrony/chrony.drift Aug 1 16:59:21 chronyd[792]: Timezone right/UTC failed leap second check, ignoring Aug 1 16:59:23 dnsmasq[816]: started, version 2.84 cachesize 150 Aug 1 16:59:23 dnsmasq[816]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 1 16:59:23 dnsmasq-tftp[816]: TFTP root is /card/tftp Aug 1 16:59:23 dnsmasq[816]: using only locally-known addresses for domain esp Aug 1 16:59:23 dnsmasq[816]: no servers found in /etc/resolv.conf, will retry Aug 1 16:59:23 dnsmasq[816]: read /etc/hosts - 5 addresses Aug 1 16:59:24 dnsmasq[816]: read /etc/hosts - 6 addresses Aug 1 16:59:25 dnsmasq[816]: read /etc/hosts - 6 addresses Aug 1 16:59:26 dnsmasq[816]: read /etc/hosts - 6 addresses Aug 1 16:59:26 udhcpc[858]: eth0: DHCP bound wired to 134.89.29.121 with DNS 134.89.10.10 134.89.12.87 Aug 1 16:59:26 dnsmasq[816]: reading /etc/resolv.conf Aug 1 16:59:26 dnsmasq[816]: using only locally-known addresses for domain esp Aug 1 16:59:26 dnsmasq[816]: using nameserver 192.168.5.1#53 Aug 1 16:59:26 dnsmasq[816]: read /etc/hosts - 6 addresses Aug 1 16:59:30 rpc.statd[978]: Version 1.1.0 Starting Aug 1 16:59:30 rpc.statd[978]: Flags: Aug 1 16:59:39 dropbear[1013]: Child connection from 134.89.28.217:35924 Aug 1 16:59:43 dropbear[1013]: Bad password attempt for 'esp' from 134.89.28.217:35924 Aug 1 16:59:46 pppd[707]: LCP: timeout sending Config-Requests Aug 1 16:59:47 dropbear[1013]: Password auth succeeded for 'esp' from 134.89.28.217:35924 Aug 1 16:59:54 chronyd[792]: Selected source 134.89.2.91 (ESPshore) Aug 1 19:03:08 dropbear[1072]: Early exit: Failed socket address: Transport endpoint is not connected Aug 1 19:04:15 dropbear[1081]: Child connection from 134.89.31.60:33312 Aug 1 19:04:16 dropbear[1081]: Login attempt for nonexistent user Aug 1 19:04:16 dropbear[1081]: Exit before auth from <134.89.31.60:33312>: Error reading: Connection reset by peer Aug 1 23:50:54 dnsmasq[816]: reading /etc/resolv.conf Aug 1 23:50:54 dnsmasq[816]: using only locally-known addresses for domain esp Aug 1 23:50:54 dnsmasq[816]: using nameserver 192.168.5.1#53 Aug 1 23:50:54 kernel: [24713.26] ks8851_mll ks8851_mll.0 eth0: BUSY Aug 1 23:50:54 dropbear[1159]: Child connection from 134.89.28.206:55341 Aug 1 23:50:54 dropbear[1159]: Exit before auth from <134.89.28.206:55341>: Exited normally Aug 2 16:52:34 dropbear[1461]: Child connection from 134.89.28.206:53190 Aug 2 16:52:34 dropbear[1461]: Exit before auth from <134.89.28.206:53190>: Exited normally Aug 3 09:53:36 dropbear[1755]: Child connection from 134.89.29.111:63402 Aug 3 09:53:36 dropbear[1755]: Exit before auth from <134.89.29.111:63402>: Exited normally Aug 3 11:00:21 dropbear[1778]: Child connection from 192.168.5.1:51348 Aug 3 11:00:24 dropbear[1778]: Password auth succeeded for 'esp' from 192.168.5.1:51348 Aug 3 11:00:25 dropbear[1778]: Exit (esp) from <192.168.5.1:51348>: Disconnect received Aug 3 11:00:50 dropbear[1786]: Child connection from 192.168.5.1:51352 Aug 3 11:00:52 dropbear[1786]: Password auth succeeded for 'esp' from 192.168.5.1:51352 Aug 3 11:02:26 dropbear[1800]: Child connection from 192.168.5.1:51356 Aug 3 11:02:30 dropbear[1800]: Password auth succeeded for 'esp' from 192.168.5.1:51356 Aug 3 11:02:30 dropbear[1800]: Exit (esp) from <192.168.5.1:51356>: Disconnect received Aug 3 11:02:57 dropbear[1808]: Child connection from 192.168.5.1:51357 Aug 3 11:03:01 dropbear[1808]: Password auth succeeded for 'esp' from 192.168.5.1:51357 Aug 3 11:03:01 dropbear[1808]: Exit (esp) from <192.168.5.1:51357>: Disconnect received Aug 3 11:03:32 dropbear[1816]: Child connection from 192.168.5.1:51362 Aug 3 11:03:35 dropbear[1816]: Password auth succeeded for 'esp' from 192.168.5.1:51362 Aug 3 11:03:36 dropbear[1816]: Exit (esp) from <192.168.5.1:51362>: Disconnect received Aug 3 11:03:57 dropbear[1824]: Child connection from 192.168.5.1:51364 Aug 3 11:04:00 dropbear[1824]: Password auth succeeded for 'esp' from 192.168.5.1:51364 Aug 3 11:04:01 dropbear[1824]: Exit (esp) from <192.168.5.1:51364>: Disconnect received Aug 3 11:05:10 dropbear[1833]: Child connection from 192.168.5.1:51366 Aug 3 11:05:13 dropbear[1833]: Password auth succeeded for 'esp' from 192.168.5.1:51366 Aug 3 11:05:15 dropbear[1833]: Exit (esp) from <192.168.5.1:51366>: Disconnect received Aug 3 11:07:22 dropbear[1786]: Exit (esp) from <192.168.5.1:51352>: Disconnect received Aug 3 12:36:27 dropbear[1867]: Child connection from 192.168.5.1:47370 Aug 3 12:36:38 dropbear[1867]: Exit before auth from <192.168.5.1:47370>: Exited normally Aug 4 02:55:09 dropbear[2111]: Child connection from 134.89.28.206:65282 Aug 4 02:55:09 dropbear[2111]: Exit before auth from <134.89.28.206:65282>: Exited normally Aug 4 12:14:52 dropbear[2279]: Child connection from 134.89.28.217:41938 Aug 4 12:14:55 dropbear[2279]: Exit before auth from <134.89.28.217:41938>: (user 'nadia', 0 fails): Exited normally Aug 4 12:14:59 dropbear[2280]: Child connection from 134.89.28.217:34234 Aug 4 12:15:05 dropbear[2280]: Bad password attempt for 'esp' from 134.89.28.217:34234 Aug 4 12:15:09 dropbear[2280]: Password auth succeeded for 'esp' from 134.89.28.217:34234 Aug 4 16:14:48 dropbear[2364]: Child connection from 134.89.113.171:60805 Aug 4 16:14:52 dropbear[2364]: Bad password attempt for 'esp' from 134.89.113.171:60805 Aug 4 16:16:28 dropbear[2364]: Password auth succeeded for 'esp' from 134.89.113.171:60805 Aug 4 19:56:37 dropbear[2445]: Child connection from 134.89.29.111:55070 Aug 4 19:56:37 dropbear[2445]: Exit before auth from <134.89.29.111:55070>: Exited normally Aug 5 09:06:04 dropbear[2685]: Child connection from 134.89.12.141:52263 Aug 5 09:06:04 dropbear[2685]: Exit before auth from <134.89.12.141:52263>: Exited normally Aug 5 09:06:08 dropbear[2687]: Child connection from 134.89.12.141:52306 Aug 5 09:06:08 dropbear[2687]: Exit before auth from <134.89.12.141:52306>: Disconnect received Aug 5 09:06:08 dropbear[2688]: Child connection from 134.89.12.141:52307 Aug 5 09:06:09 dropbear[2688]: Login attempt for nonexistent user Aug 5 09:06:09 dropbear[2688]: Exit before auth from <134.89.12.141:52307>: Disconnect received Aug 5 09:06:09 dropbear[2689]: Child connection from 134.89.12.141:52320 Aug 5 09:06:10 dropbear[2689]: Login attempt for nonexistent user Aug 5 09:06:10 dropbear[2689]: Exit before auth from <134.89.12.141:52320>: Disconnect received Aug 5 09:06:10 dropbear[2690]: Child connection from 134.89.12.141:52323 Aug 5 09:06:10 dropbear[2690]: Login attempt for nonexistent user Aug 5 09:06:11 dropbear[2690]: Exit before auth from <134.89.12.141:52323>: Disconnect received Aug 5 09:06:11 dropbear[2691]: Child connection from 134.89.12.141:52328 Aug 5 09:06:11 dropbear[2691]: Login attempt for nonexistent user Aug 5 09:06:12 dropbear[2691]: Exit before auth from <134.89.12.141:52328>: Disconnect received Aug 5 09:06:12 dropbear[2692]: Child connection from 134.89.12.141:52331 Aug 5 09:06:12 dropbear[2692]: Login attempt for nonexistent user Aug 5 09:06:12 dropbear[2692]: Exit before auth from <134.89.12.141:52331>: Disconnect received Aug 5 09:06:12 dropbear[2693]: Child connection from 134.89.12.141:52335 Aug 5 09:06:13 dropbear[2693]: Login attempt for nonexistent user Aug 5 09:06:13 dropbear[2693]: Exit before auth from <134.89.12.141:52335>: Disconnect received Aug 5 10:24:34 dropbear[2715]: Child connection from 134.89.28.217:48420 Aug 5 10:24:39 dropbear[2715]: Password auth succeeded for 'esp' from 134.89.28.217:48420 Aug 5 10:45:20 dropbear[2735]: Child connection from 134.89.28.217:36728 Aug 5 10:45:22 dropbear[2735]: Password auth succeeded for 'preston' from 134.89.28.217:36728 Aug 5 10:45:24 dropbear[2735]: Exit (preston) from <134.89.28.217:36728>: Disconnect received Aug 5 10:51:36 dropbear[2364]: Exit (esp) from <134.89.113.171:60805>: Keepalive timeout Aug 5 12:58:21 dropbear[2791]: Child connection from 134.89.28.216:54724 Aug 5 12:58:21 dropbear[2791]: Exit before auth from <134.89.28.216:54724>: Exited normally Aug 5 13:53:00 dropbear[2810]: Child connection from 134.89.113.171:55139 Aug 5 13:53:05 dropbear[2810]: Password auth succeeded for 'nadia' from 134.89.113.171:55139 Aug 5 13:55:05 dropbear[2824]: Child connection from 134.89.29.121:39176 Aug 5 13:55:10 dropbear[2824]: Exit before auth from <134.89.29.121:39176>: Error reading: Connection reset by peer Aug 5 13:55:26 dropbear[1013]: Exit (esp) from <134.89.28.217:35924>: Disconnect received Aug 5 13:55:27 dropbear[2715]: Exit (esp) from <134.89.28.217:48420>: Disconnect received Aug 5 13:55:42 dropbear[2280]: Exit (esp) from <134.89.28.217:34234>: Disconnect received Aug 5 13:55:46 dropbear[2830]: Child connection from 134.89.28.217:33278 Aug 5 13:55:49 dropbear[2830]: Password auth succeeded for 'esp' from 134.89.28.217:33278 Aug 5 13:56:14 dropbear[2810]: Exit (nadia) from <134.89.113.171:55139>: Disconnect received Aug 5 13:56:18 dropbear[2845]: Child connection from 134.89.113.171:55192 Aug 5 13:56:22 dropbear[2845]: Password auth succeeded for 'esp' from 134.89.113.171:55192 Aug 5 17:14:08 dropbear[2932]: Child connection from 134.89.28.217:37876 Aug 5 17:14:12 dropbear[2932]: Password auth succeeded for 'esp' from 134.89.28.217:37876 Aug 5 17:59:53 dropbear[2845]: Exit (esp) from <134.89.113.171:55192>: Keepalive timeout Aug 6 05:59:19 dropbear[3153]: Child connection from 134.89.28.206:59428 Aug 6 05:59:19 dropbear[3153]: Exit before auth from <134.89.28.206:59428>: Exited normally Aug 6 11:17:36 dropbear[3257]: Child connection from 134.89.113.171:58737 Aug 6 11:17:40 dropbear[3257]: Password auth succeeded for 'esp' from 134.89.113.171:58737 Aug 6 12:32:50 dropbear[3296]: Child connection from 134.89.28.217:47500 Aug 6 12:32:56 dropbear[3296]: Password auth succeeded for 'esp' from 134.89.28.217:47500 Aug 6 12:35:08 dropbear[3310]: Child connection from 134.89.28.217:51366 Aug 6 12:35:08 dropbear[3310]: Exit before auth from <134.89.28.217:51366>: (user 'esp', 0 fails): Exited normally Aug 6 12:35:20 dropbear[3311]: Child connection from 134.89.28.217:59122 Aug 6 12:35:23 dropbear[3311]: Password auth succeeded for 'esp' from 134.89.28.217:59122 Aug 6 12:35:23 dropbear[3311]: Exit (esp) from <134.89.28.217:59122>: Disconnect received Aug 6 12:35:37 dropbear[3320]: Child connection from 134.89.28.217:55460 Aug 6 12:35:40 dropbear[3320]: Password auth succeeded for 'esp' from 134.89.28.217:55460 Aug 6 12:35:40 dropbear[3320]: Exit (esp) from <134.89.28.217:55460>: Disconnect received Aug 6 12:36:09 dropbear[3296]: Exit (esp) from <134.89.28.217:47500>: Disconnect received Aug 6 22:59:26 dropbear[3498]: Child connection from 134.89.29.111:49501 Aug 6 22:59:26 dropbear[3498]: Exit before auth from <134.89.29.111:49501>: Exited normally Aug 7 09:06:06 dropbear[3680]: Child connection from 134.89.12.141:61628 Aug 7 09:06:06 dropbear[3680]: Exit before auth from <134.89.12.141:61628>: Exited normally Aug 7 09:06:11 dropbear[3683]: Child connection from 134.89.12.141:61686 Aug 7 09:06:11 dropbear[3683]: Exit before auth from <134.89.12.141:61686>: Disconnect received Aug 7 09:06:11 dropbear[3684]: Child connection from 134.89.12.141:61690 Aug 7 09:06:12 dropbear[3684]: Login attempt for nonexistent user Aug 7 09:06:12 dropbear[3684]: Exit before auth from <134.89.12.141:61690>: Disconnect received Aug 7 09:06:12 dropbear[3685]: Child connection from 134.89.12.141:61704 Aug 7 09:06:13 dropbear[3685]: Login attempt for nonexistent user Aug 7 09:06:13 dropbear[3685]: Exit before auth from <134.89.12.141:61704>: Disconnect received Aug 7 09:06:13 dropbear[3686]: Child connection from 134.89.12.141:61711 Aug 7 09:06:14 dropbear[3686]: Login attempt for nonexistent user Aug 7 09:06:14 dropbear[3686]: Exit before auth from <134.89.12.141:61711>: Disconnect received Aug 7 09:06:14 dropbear[3687]: Child connection from 134.89.12.141:61712 Aug 7 09:06:14 dropbear[3687]: Login attempt for nonexistent user Aug 7 09:06:15 dropbear[3687]: Exit before auth from <134.89.12.141:61712>: Disconnect received Aug 7 09:06:15 dropbear[3688]: Child connection from 134.89.12.141:61714 Aug 7 09:06:15 dropbear[3688]: Login attempt for nonexistent user Aug 7 09:06:16 dropbear[3688]: Exit before auth from <134.89.12.141:61714>: Disconnect received Aug 7 09:06:16 dropbear[3689]: Child connection from 134.89.12.141:61716 Aug 7 09:06:16 dropbear[3689]: Login attempt for nonexistent user Aug 7 09:06:16 dropbear[3689]: Exit before auth from <134.89.12.141:61716>: Disconnect received Aug 7 12:53:22 syslogd started: BusyBox v1.11.2 Aug 7 12:53:22 syslogd exiting Aug 7 12:53:22 syslogd started: BusyBox v1.11.2 Aug 7 12:53:24 kernel: [ 17.12] PPP generic driver version 2.4.2 Aug 7 12:53:24 pppd[718]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 7 12:53:24 pppd[718]: Using interface ppp2 Aug 7 12:53:24 pppd[718]: Connect: ppp2 <--> /dev/platform Aug 7 12:53:27 kernel: [ 20.87] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 7 12:53:27 kernel: [ 20.87] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 7 12:53:29 chronyd[800]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 7 12:53:29 chronyd[800]: Running with root privileges Aug 7 12:53:29 chronyd[800]: Frequency 23.325 +/- 0.436 ppm read from /var/lib/chrony/chrony.drift Aug 7 12:53:29 chronyd[800]: Timezone right/UTC failed leap second check, ignoring Aug 7 12:53:31 dnsmasq[824]: started, version 2.84 cachesize 150 Aug 7 12:53:31 dnsmasq[824]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 7 12:53:31 dnsmasq-tftp[824]: TFTP root is /card/tftp Aug 7 12:53:31 dnsmasq[824]: using only locally-known addresses for domain esp Aug 7 12:53:31 dnsmasq[824]: no servers found in /etc/resolv.conf, will retry Aug 7 12:53:31 dnsmasq[824]: read /etc/hosts - 5 addresses Aug 7 12:53:54 pppd[718]: LCP: timeout sending Config-Requests Aug 7 13:02:32 syslogd started: BusyBox v1.11.2 Aug 7 13:02:32 syslogd exiting Aug 7 13:02:32 syslogd started: BusyBox v1.11.2 Aug 7 13:02:34 kernel: [ 15.15] PPP generic driver version 2.4.2 Aug 7 13:02:34 pppd[706]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 7 13:02:34 pppd[706]: Using interface ppp2 Aug 7 13:02:34 pppd[706]: Connect: ppp2 <--> /dev/platform Aug 7 13:02:37 kernel: [ 18.90] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 7 13:02:37 kernel: [ 18.90] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 7 13:02:39 chronyd[790]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 7 13:02:39 chronyd[790]: Running with root privileges Aug 7 13:02:39 chronyd[790]: Frequency 23.325 +/- 0.436 ppm read from /var/lib/chrony/chrony.drift Aug 7 13:02:39 chronyd[790]: Timezone right/UTC failed leap second check, ignoring Aug 7 13:02:41 dnsmasq[814]: started, version 2.84 cachesize 150 Aug 7 13:02:41 dnsmasq[814]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 7 13:02:41 dnsmasq-tftp[814]: TFTP root is /card/tftp Aug 7 13:02:41 dnsmasq[814]: using only locally-known addresses for domain esp Aug 7 13:02:41 dnsmasq[814]: no servers found in /etc/resolv.conf, will retry Aug 7 13:02:41 dnsmasq[814]: read /etc/hosts - 5 addresses Aug 7 13:02:42 dnsmasq[814]: read /etc/hosts - 6 addresses Aug 7 13:02:43 dnsmasq[814]: read /etc/hosts - 6 addresses Aug 7 13:02:44 dnsmasq[814]: read /etc/hosts - 6 addresses Aug 7 13:02:44 udhcpc[856]: eth0: DHCP bound wired to 134.89.29.121 with DNS 134.89.10.10 134.89.12.87 Aug 7 13:02:44 dnsmasq[814]: reading /etc/resolv.conf Aug 7 13:02:44 dnsmasq[814]: using only locally-known addresses for domain esp Aug 7 13:02:44 dnsmasq[814]: using nameserver 192.168.5.1#53 Aug 7 13:02:44 dnsmasq[814]: read /etc/hosts - 6 addresses Aug 7 13:02:48 rpc.statd[976]: Version 1.1.0 Starting Aug 7 13:02:48 rpc.statd[976]: Flags: Aug 7 13:03:03 dropbear[1011]: Child connection from 134.89.113.171:55425 Aug 7 13:03:04 pppd[706]: LCP: timeout sending Config-Requests Aug 7 13:03:05 dropbear[1011]: Exit before auth from <134.89.113.171:55425>: (user 'nadia', 0 fails): Error reading: Connection reset by peer Aug 7 13:03:08 dropbear[1018]: Child connection from 134.89.113.171:55426 Aug 7 13:03:11 dropbear[1018]: Password auth succeeded for 'esp' from 134.89.113.171:55426 Aug 7 13:03:12 chronyd[790]: Selected source 134.89.2.91 (ESPshore) Aug 7 13:19:51 dropbear[1045]: Child connection from 134.89.113.171:55581 Aug 7 13:19:54 dropbear[1045]: Bad password attempt for 'esp' from 134.89.113.171:55581 Aug 7 13:19:58 dropbear[1045]: Password auth succeeded for 'esp' from 134.89.113.171:55581 Aug 7 15:04:36 kernel: [ 7337.71] ks8851_mll ks8851_mll.0 eth0: BUSY Aug 7 15:11:37 dropbear[1045]: Exit (esp) from <134.89.113.171:55581>: Keepalive timeout Aug 7 15:13:25 dropbear[1018]: Exit (esp) from <134.89.113.171:55426>: Keepalive timeout Aug 7 15:35:08 dropbear[1094]: Child connection from 134.89.28.217:38184 Aug 7 15:35:58 dropbear[1095]: Child connection from 134.89.29.109:55244 Aug 7 15:36:15 dropbear[1095]: Bad password attempt for 'nadia' from 134.89.29.109:55244 Aug 7 15:36:18 dropbear[1095]: Bad password attempt for 'nadia' from 134.89.29.109:55244 Aug 7 15:36:21 dropbear[1095]: Exit before auth from <134.89.29.109:55244>: (user 'nadia', 2 fails): Exited normally Aug 7 15:36:24 dropbear[1096]: Child connection from 134.89.29.109:53040 Aug 7 15:36:27 dropbear[1096]: Password auth succeeded for 'esp' from 134.89.29.109:53040 Aug 7 15:40:08 dropbear[1094]: Exit before auth from <134.89.28.217:38184>: (user 'nadia', 0 fails): Timeout before auth Aug 7 15:41:36 dropbear[1111]: Child connection from 134.89.29.109:57944 Aug 7 15:41:38 dropbear[1111]: Password auth succeeded for 'esp' from 134.89.29.109:57944 Aug 7 16:00:24 dnsmasq[814]: reading /etc/resolv.conf Aug 7 16:00:24 dnsmasq[814]: using only locally-known addresses for domain esp Aug 7 16:00:24 dnsmasq[814]: using nameserver 192.168.5.1#53 Aug 7 16:00:24 dropbear[1127]: Child connection from 134.89.29.111:53016 Aug 7 16:00:24 dropbear[1127]: Exit before auth from <134.89.29.111:53016>: Exited normally Aug 7 16:49:16 syslogd started: BusyBox v1.11.2 Aug 7 16:49:16 syslogd exiting Aug 7 16:49:16 syslogd started: BusyBox v1.11.2 Aug 7 16:49:18 kernel: [ 19.47] PPP generic driver version 2.4.2 Aug 7 16:49:18 pppd[711]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 7 16:49:18 pppd[711]: Using interface ppp2 Aug 7 16:49:18 pppd[711]: Connect: ppp2 <--> /dev/platform Aug 7 16:49:21 kernel: [ 23.24] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 7 16:49:21 kernel: [ 23.24] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 7 16:49:23 chronyd[794]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 7 16:49:23 chronyd[794]: Running with root privileges Aug 7 16:49:23 chronyd[794]: Frequency 23.219 +/- 0.110 ppm read from /var/lib/chrony/chrony.drift Aug 7 16:49:23 chronyd[794]: Timezone right/UTC failed leap second check, ignoring Aug 7 16:49:25 dnsmasq[818]: started, version 2.84 cachesize 150 Aug 7 16:49:25 dnsmasq[818]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 7 16:49:25 dnsmasq-tftp[818]: TFTP root is /card/tftp Aug 7 16:49:25 dnsmasq[818]: using only locally-known addresses for domain esp Aug 7 16:49:25 dnsmasq[818]: no servers found in /etc/resolv.conf, will retry Aug 7 16:49:25 dnsmasq[818]: read /etc/hosts - 5 addresses Aug 7 16:49:26 dnsmasq[818]: read /etc/hosts - 6 addresses Aug 7 16:49:27 dnsmasq[818]: read /etc/hosts - 6 addresses Aug 7 16:49:28 dnsmasq[818]: read /etc/hosts - 6 addresses Aug 7 16:49:28 udhcpc[860]: eth0: DHCP bound wired to 134.89.29.121 with DNS 134.89.10.10 134.89.12.87 Aug 7 16:49:28 dnsmasq[818]: reading /etc/resolv.conf Aug 7 16:49:28 dnsmasq[818]: using only locally-known addresses for domain esp Aug 7 16:49:28 dnsmasq[818]: using nameserver 192.168.5.1#53 Aug 7 16:49:29 dnsmasq[818]: reading /etc/resolv.conf Aug 7 16:49:29 dnsmasq[818]: using only locally-known addresses for domain esp Aug 7 16:49:29 dnsmasq[818]: using nameserver 192.168.5.1#53 Aug 7 16:49:29 dnsmasq[818]: read /etc/hosts - 6 addresses Aug 7 16:49:32 rpc.statd[980]: Version 1.1.0 Starting Aug 7 16:49:32 rpc.statd[980]: Flags: Aug 7 16:49:48 pppd[711]: LCP: timeout sending Config-Requests Aug 7 16:49:56 chronyd[794]: Selected source 134.89.2.91 (ESPshore) Aug 7 17:05:37 dropbear[1026]: Child connection from 134.89.28.217:53220 Aug 7 17:05:40 dropbear[1026]: Password auth succeeded for 'esp' from 134.89.28.217:53220 Aug 7 17:06:04 dropbear[1026]: Exit (esp) from <134.89.28.217:53220>: Disconnect received Aug 7 17:06:27 dropbear[1046]: Child connection from 134.89.28.217:53740 Aug 7 17:06:31 dropbear[1046]: Password auth succeeded for 'esp' from 134.89.28.217:53740 Aug 7 17:32:51 dropbear[1069]: Child connection from 134.89.29.109:50550 Aug 7 17:32:54 dropbear[1069]: Password auth succeeded for 'esp' from 134.89.29.109:50550 Aug 7 18:20:02 kernel: [ 5464.00] ks8851_mll ks8851_mll.0 eth0: BUSY Aug 7 18:55:13 dropbear[1100]: Child connection from 134.89.28.205:63242 Aug 7 18:55:16 dropbear[1100]: Password auth succeeded for 'esp' from 134.89.28.205:63242 Aug 7 19:57:39 syslogd started: BusyBox v1.11.2 Aug 7 19:57:39 syslogd exiting Aug 7 19:57:39 syslogd started: BusyBox v1.11.2 Aug 7 19:57:41 kernel: [ 15.66] PPP generic driver version 2.4.2 Aug 7 19:57:41 pppd[716]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 7 19:57:41 pppd[716]: Using interface ppp2 Aug 7 19:57:41 pppd[716]: Connect: ppp2 <--> /dev/platform Aug 7 19:57:44 kernel: [ 19.47] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 7 19:57:44 kernel: [ 19.47] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 7 19:57:46 chronyd[802]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 7 19:57:46 chronyd[802]: Running with root privileges Aug 7 19:57:46 chronyd[802]: Frequency 27.404 +/- 0.163 ppm read from /var/lib/chrony/chrony.drift Aug 7 19:57:46 chronyd[802]: Timezone right/UTC failed leap second check, ignoring Aug 7 19:57:48 dnsmasq[826]: started, version 2.84 cachesize 150 Aug 7 19:57:48 dnsmasq[826]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 7 19:57:48 dnsmasq-tftp[826]: TFTP root is /card/tftp Aug 7 19:57:48 dnsmasq[826]: using only locally-known addresses for domain esp Aug 7 19:57:48 dnsmasq[826]: no servers found in /etc/resolv.conf, will retry Aug 7 19:57:48 dnsmasq[826]: read /etc/hosts - 5 addresses Aug 7 19:57:49 dnsmasq[826]: read /etc/hosts - 6 addresses Aug 7 19:57:50 dnsmasq[826]: read /etc/hosts - 6 addresses Aug 7 19:57:51 dnsmasq[826]: read /etc/hosts - 6 addresses Aug 7 19:57:51 udhcpc[868]: eth0: DHCP bound wired to 134.89.29.121 with DNS 134.89.10.10 134.89.12.87 Aug 7 19:57:51 dnsmasq[826]: reading /etc/resolv.conf Aug 7 19:57:51 dnsmasq[826]: using only locally-known addresses for domain esp Aug 7 19:57:51 dnsmasq[826]: using nameserver 192.168.5.1#53 Aug 7 19:57:52 dnsmasq[826]: reading /etc/resolv.conf Aug 7 19:57:52 dnsmasq[826]: using only locally-known addresses for domain esp Aug 7 19:57:52 dnsmasq[826]: using nameserver 192.168.5.1#53 Aug 7 19:57:52 dnsmasq[826]: read /etc/hosts - 6 addresses Aug 7 19:57:56 rpc.statd[988]: Version 1.1.0 Starting Aug 7 19:57:56 rpc.statd[988]: Flags: Aug 7 19:58:11 pppd[716]: LCP: timeout sending Config-Requests Aug 7 19:58:19 chronyd[802]: Selected source 134.89.2.91 (ESPshore) Aug 7 19:59:07 dropbear[1033]: Child connection from 134.89.29.109:58336 Aug 7 19:59:24 dropbear[1033]: Bad password attempt for 'esp' from 134.89.29.109:58336 Aug 7 19:59:26 dropbear[1033]: Password auth succeeded for 'esp' from 134.89.29.109:58336 Aug 7 19:59:39 dropbear[1033]: Exit (esp) from <134.89.29.109:58336>: Disconnect received Aug 7 19:59:44 dropbear[1045]: Child connection from 134.89.29.109:54514 Aug 7 19:59:50 dropbear[1045]: Password auth succeeded for 'esp' from 134.89.29.109:54514 Aug 7 20:00:13 dropbear[1045]: Exit (esp) from <134.89.29.109:54514>: Disconnect received Aug 7 20:00:17 dropbear[1058]: Child connection from 134.89.29.109:52570 Aug 7 20:00:20 dropbear[1058]: Password auth succeeded for 'esp' from 134.89.29.109:52570 Aug 7 20:00:40 dropbear[1058]: Exit (esp) from <134.89.29.109:52570>: Disconnect received Aug 7 20:00:47 dropbear[1075]: Child connection from 134.89.29.109:33732 Aug 7 20:00:50 dropbear[1075]: Bad password attempt for 'nadia' from 134.89.29.109:33732 Aug 7 20:00:54 dropbear[1075]: Bad password attempt for 'nadia' from 134.89.29.109:33732 Aug 7 20:01:00 dropbear[1075]: Exit before auth from <134.89.29.109:33732>: (user 'nadia', 2 fails): Exited normally Aug 7 20:01:04 dropbear[1076]: Child connection from 134.89.29.109:42586 Aug 7 20:01:08 dropbear[1076]: Password auth succeeded for 'esp' from 134.89.29.109:42586 Aug 7 20:24:29 dropbear[1089]: Child connection from 134.89.28.205:64403 Aug 7 20:24:32 dropbear[1089]: Password auth succeeded for 'esp' from 134.89.28.205:64403 Aug 7 21:26:50 dropbear[1117]: Child connection from 134.89.29.109:43644 Aug 7 21:26:53 dropbear[1117]: Password auth succeeded for 'esp' from 134.89.29.109:43644 Aug 7 21:27:06 dropbear[1117]: Exit (esp) from <134.89.29.109:43644>: Disconnect received Aug 7 21:52:01 dropbear[1089]: Exit (esp) from <134.89.28.205:64403>: Keepalive timeout Aug 8 09:01:49 kernel: [47064.55] ks8851_mll ks8851_mll.0 eth0: BUSY Aug 8 09:01:50 dropbear[1336]: Child connection from 134.89.28.206:56327 Aug 8 09:01:50 dropbear[1336]: Exit before auth from <134.89.28.206:56327>: Exited normally Aug 8 19:07:03 dropbear[1513]: Early exit: Failed socket address: Transport endpoint is not connected Aug 8 19:08:11 dropbear[1522]: Child connection from 134.89.31.60:39176 Aug 8 19:08:11 dropbear[1522]: Login attempt for nonexistent user Aug 8 19:08:11 dropbear[1522]: Exit before auth from <134.89.31.60:39176>: Error reading: Connection reset by peer Aug 9 02:02:42 dropbear[1642]: Child connection from 134.89.28.206:56155 Aug 9 02:02:42 dropbear[1642]: Exit before auth from <134.89.28.206:56155>: Exited normally Aug 9 19:03:21 dropbear[1930]: Child connection from 134.89.28.206:55705 Aug 9 19:03:21 dropbear[1930]: Exit before auth from <134.89.28.206:55705>: Exited normally Aug 10 12:04:20 dropbear[2223]: Child connection from 134.89.28.206:55253 Aug 10 12:04:20 dropbear[2223]: Exit before auth from <134.89.28.206:55253>: Exited normally Aug 10 23:42:38 dropbear[2417]: Child connection from 134.89.74.138:52386 Aug 10 23:42:48 dropbear[2417]: Password auth succeeded for 'esp' from 134.89.74.138:52386 Aug 10 23:49:33 dropbear[2428]: Child connection from 134.89.74.138:63405 Aug 10 23:49:38 dropbear[2428]: Password auth succeeded for 'esp' from 134.89.74.138:63405 Aug 11 02:23:54 dropbear[2428]: Exit (esp) from <134.89.74.138:63405>: Keepalive timeout Aug 11 02:25:38 dropbear[2417]: Exit (esp) from <134.89.74.138:52386>: Keepalive timeout Aug 11 05:04:45 dropbear[2531]: Child connection from 134.89.28.206:54458 Aug 11 05:04:45 dropbear[2531]: Exit before auth from <134.89.28.206:54458>: Exited normally Aug 11 07:12:43 dropbear[2566]: Child connection from 134.89.74.134:65047 Aug 11 07:12:47 dropbear[2566]: Password auth succeeded for 'esp' from 134.89.74.134:65047 Aug 11 09:38:02 dropbear[2566]: Exit (esp) from <134.89.74.134:65047>: Keepalive timeout Aug 11 12:10:40 dropbear[2660]: Child connection from 134.89.113.188:50657 Aug 11 12:10:43 dropbear[2660]: Bad password attempt for 'esp' from 134.89.113.188:50657 Aug 11 12:10:46 dropbear[2660]: Password auth succeeded for 'esp' from 134.89.113.188:50657 Aug 11 13:39:12 dropbear[2708]: Child connection from 134.89.29.109:40956 Aug 11 13:39:15 dropbear[2708]: Password auth succeeded for 'esp' from 134.89.29.109:40956 Aug 11 17:11:10 dropbear[2660]: Exit (esp) from <134.89.113.188:50657>: Disconnect received Aug 11 22:05:19 dropbear[2887]: Child connection from 134.89.28.206:52406 Aug 11 22:05:19 dropbear[2887]: Exit before auth from <134.89.28.206:52406>: Exited normally Aug 11 23:10:48 dropbear[2909]: Child connection from 192.168.5.1:43246 Aug 11 23:10:49 dropbear[2909]: Exit before auth from <192.168.5.1:43246>: Exited normally Aug 12 08:02:05 dropbear[3059]: Child connection from 192.168.5.1:57191 Aug 12 08:02:09 dropbear[3059]: Password auth succeeded for 'esp' from 192.168.5.1:57191 Aug 12 09:06:12 dropbear[3093]: Child connection from 134.89.12.141:53951 Aug 12 09:06:12 dropbear[3093]: Exit before auth from <134.89.12.141:53951>: Exited normally Aug 12 09:06:17 dropbear[3096]: Child connection from 134.89.12.141:54019 Aug 12 09:06:17 dropbear[3096]: Exit before auth from <134.89.12.141:54019>: Disconnect received Aug 12 09:06:17 dropbear[3097]: Child connection from 134.89.12.141:54030 Aug 12 09:06:18 dropbear[3097]: Login attempt for nonexistent user Aug 12 09:06:18 dropbear[3097]: Exit before auth from <134.89.12.141:54030>: Disconnect received Aug 12 09:06:18 dropbear[3098]: Child connection from 134.89.12.141:54039 Aug 12 09:06:18 dropbear[3098]: Login attempt for nonexistent user Aug 12 09:06:19 dropbear[3098]: Exit before auth from <134.89.12.141:54039>: Disconnect received Aug 12 09:06:19 dropbear[3099]: Child connection from 134.89.12.141:54044 Aug 12 09:06:19 dropbear[3099]: Login attempt for nonexistent user Aug 12 09:06:20 dropbear[3099]: Exit before auth from <134.89.12.141:54044>: Disconnect received Aug 12 09:06:20 dropbear[3100]: Child connection from 134.89.12.141:54047 Aug 12 09:06:20 dropbear[3100]: Login attempt for nonexistent user Aug 12 09:06:21 dropbear[3100]: Exit before auth from <134.89.12.141:54047>: Disconnect received Aug 12 09:06:21 dropbear[3101]: Child connection from 134.89.12.141:54051 Aug 12 09:06:21 dropbear[3101]: Login attempt for nonexistent user Aug 12 09:06:21 dropbear[3101]: Exit before auth from <134.89.12.141:54051>: Disconnect received Aug 12 09:06:21 dropbear[3102]: Child connection from 134.89.12.141:54052 Aug 12 09:06:22 dropbear[3102]: Login attempt for nonexistent user Aug 12 09:06:22 dropbear[3102]: Exit before auth from <134.89.12.141:54052>: Disconnect received Aug 12 10:00:39 dropbear[3059]: Exit (esp) from <192.168.5.1:57191>: Disconnect received Aug 12 12:31:01 dropbear[3158]: Child connection from 192.168.5.1:60868 Aug 12 12:31:04 dropbear[3158]: Password auth succeeded for 'esp' from 192.168.5.1:60868 Aug 12 12:43:29 dropbear[3158]: Exit (esp) from <192.168.5.1:60868>: Disconnect received Aug 12 15:12:54 dropbear[3216]: Child connection from 134.89.29.111:59375 Aug 12 15:12:54 dropbear[3216]: Exit before auth from <134.89.29.111:59375>: Exited normally Aug 12 23:29:28 dropbear[3360]: Child connection from 192.168.5.1:54150 Aug 12 23:29:29 dropbear[3360]: Exit before auth from <192.168.5.1:54150>: Exited normally Aug 13 06:19:21 dropbear[3469]: Child connection from 192.168.5.1:48830 Aug 13 06:19:23 dropbear[3469]: Exit before auth from <192.168.5.1:48830>: Exited normally Aug 13 08:06:34 dropbear[3505]: Child connection from 134.89.29.111:58618 Aug 13 08:06:34 dropbear[3505]: Exit before auth from <134.89.29.111:58618>: Exited normally Aug 13 16:13:13 dropbear[3640]: Child connection from 134.89.114.16:59720 Aug 13 16:13:17 dropbear[3640]: Password auth succeeded for 'nadia' from 134.89.114.16:59720 Aug 13 16:14:21 dropbear[3640]: Exit (nadia) from <134.89.114.16:59720>: Disconnect received Aug 14 01:05:55 dropbear[3814]: Child connection from 134.89.29.111:56321 Aug 14 01:05:55 dropbear[3814]: Exit before auth from <134.89.29.111:56321>: Exited normally Aug 14 09:06:11 dropbear[3953]: Child connection from 134.89.12.141:61780 Aug 14 09:06:11 dropbear[3953]: Exit before auth from <134.89.12.141:61780>: Exited normally Aug 14 09:06:15 dropbear[3956]: Child connection from 134.89.12.141:61841 Aug 14 09:06:16 dropbear[3956]: Exit before auth from <134.89.12.141:61841>: Disconnect received Aug 14 09:06:16 dropbear[3957]: Child connection from 134.89.12.141:61845 Aug 14 09:06:16 dropbear[3957]: Login attempt for nonexistent user Aug 14 09:06:17 dropbear[3957]: Exit before auth from <134.89.12.141:61845>: Disconnect received Aug 14 09:06:17 dropbear[3958]: Child connection from 134.89.12.141:61861 Aug 14 09:06:17 dropbear[3958]: Login attempt for nonexistent user Aug 14 09:06:17 dropbear[3958]: Exit before auth from <134.89.12.141:61861>: Disconnect received Aug 14 09:06:17 dropbear[3959]: Child connection from 134.89.12.141:61863 Aug 14 09:06:18 dropbear[3959]: Login attempt for nonexistent user Aug 14 09:06:18 dropbear[3959]: Exit before auth from <134.89.12.141:61863>: Disconnect received Aug 14 09:06:18 dropbear[3960]: Child connection from 134.89.12.141:61866 Aug 14 09:06:19 dropbear[3960]: Login attempt for nonexistent user Aug 14 09:06:19 dropbear[3960]: Exit before auth from <134.89.12.141:61866>: Disconnect received Aug 14 09:06:19 dropbear[3961]: Child connection from 134.89.12.141:61868 Aug 14 09:06:20 dropbear[3961]: Login attempt for nonexistent user Aug 14 09:06:20 dropbear[3961]: Exit before auth from <134.89.12.141:61868>: Disconnect received Aug 14 09:06:20 dropbear[3962]: Child connection from 134.89.12.141:61871 Aug 14 09:06:21 dropbear[3962]: Login attempt for nonexistent user Aug 14 09:06:21 dropbear[3962]: Exit before auth from <134.89.12.141:61871>: Disconnect received Aug 14 12:22:47 dropbear[4014]: Child connection from 134.89.28.205:63719 Aug 14 12:22:50 dropbear[4014]: Password auth succeeded for 'esp' from 134.89.28.205:63719 Aug 14 14:03:51 dropbear[4061]: Child connection from 134.89.114.2:50336 Aug 14 14:03:54 dropbear[4061]: Password auth succeeded for 'esp' from 134.89.114.2:50336 Aug 14 14:09:39 dropbear[4014]: Exit (esp) from <134.89.28.205:63719>: Keepalive timeout Aug 14 17:33:09 dropbear[4061]: Exit (esp) from <134.89.114.2:50336>: Keepalive timeout Aug 14 18:07:15 dropbear[4142]: Child connection from 134.89.28.205:54358 Aug 14 18:07:15 dropbear[4142]: Exit before auth from <134.89.28.205:54358>: Exited normally Aug 14 21:31:02 dropbear[4207]: Child connection from 134.89.28.205:65440 Aug 14 21:31:07 dropbear[4207]: Password auth succeeded for 'nadia' from 134.89.28.205:65440 Aug 14 21:31:10 dropbear[4207]: Exit (nadia) from <134.89.28.205:65440>: Disconnect received Aug 14 21:31:14 dropbear[4217]: Child connection from 134.89.28.205:65441 Aug 14 21:31:18 dropbear[4217]: Bad password attempt for 'esp' from 134.89.28.205:65441 Aug 14 21:31:21 dropbear[4217]: Password auth succeeded for 'esp' from 134.89.28.205:65441 Aug 14 21:51:35 dropbear[4217]: Exit (esp) from <134.89.28.205:65441>: Keepalive timeout Aug 14 23:03:58 dropbear[4255]: Child connection from 192.168.5.1:53707 Aug 14 23:04:02 dropbear[4255]: Password auth succeeded for 'esp' from 192.168.5.1:53707 Aug 14 23:13:45 dropbear[4272]: Child connection from 134.89.28.205:50230 Aug 14 23:13:53 dropbear[4272]: Password auth succeeded for 'esp' from 134.89.28.205:50230 Aug 14 23:14:18 dropbear[4272]: Exit (esp) from <134.89.28.205:50230>: Disconnect received Aug 14 23:15:27 dropbear[4255]: Exit (esp) from <192.168.5.1:53707>: Disconnect received Aug 15 05:55:33 dropbear[4401]: Child connection from 192.168.5.1:56653 Aug 15 05:55:35 dropbear[4401]: Password auth succeeded for 'esp' from 192.168.5.1:56653 Aug 15 06:18:39 dropbear[4401]: Exit (esp) from <192.168.5.1:56653>: Disconnect received Aug 15 11:07:44 dropbear[4509]: Child connection from 134.89.28.206:65520 Aug 15 11:07:44 dropbear[4509]: Exit before auth from <134.89.28.206:65520>: Exited normally Aug 15 16:40:34 dropbear[4605]: Child connection from 134.89.28.205:55633 Aug 15 16:40:55 dropbear[4605]: Password auth succeeded for 'esp' from 134.89.28.205:55633 Aug 15 19:10:40 dropbear[4660]: Early exit: Failed socket address: Transport endpoint is not connected Aug 15 19:11:46 dropbear[4669]: Child connection from 134.89.31.60:42208 Aug 15 19:11:47 dropbear[4669]: Login attempt for nonexistent user Aug 15 19:11:47 dropbear[4669]: Exit before auth from <134.89.31.60:42208>: Error reading: Connection reset by peer Aug 15 22:26:11 dropbear[4716]: Child connection from 192.168.5.1:60736 Aug 15 22:26:14 dropbear[4716]: Bad password attempt for 'esp' from 192.168.5.1:60736 Aug 15 22:26:23 dropbear[4716]: Password auth succeeded for 'esp' from 192.168.5.1:60736 Aug 15 22:56:05 dropbear[4716]: Exit (esp) from <192.168.5.1:60736>: Disconnect received Aug 16 00:04:01 dropbear[4605]: Exit (esp) from <134.89.28.205:55633>: Keepalive timeout Aug 16 04:09:04 dropbear[4822]: Child connection from 134.89.29.111:58848 Aug 16 04:09:05 dropbear[4822]: Exit before auth from <134.89.29.111:58848>: Exited normally Aug 16 07:50:40 dropbear[4882]: Child connection from 192.168.5.1:62447 Aug 16 07:50:46 dropbear[4882]: Password auth succeeded for 'esp' from 192.168.5.1:62447 Aug 16 08:35:03 dropbear[4882]: Exit (esp) from <192.168.5.1:62447>: Disconnect received Aug 16 08:37:27 dropbear[4911]: Child connection from 192.168.5.1:64746 Aug 16 08:37:30 dropbear[4911]: Password auth succeeded for 'esp' from 192.168.5.1:64746 Aug 16 08:43:55 dropbear[4911]: Exit (esp) from <192.168.5.1:64746>: Disconnect received Aug 16 08:51:03 dropbear[4926]: Child connection from 192.168.5.1:65370 Aug 16 08:51:07 dropbear[4926]: Bad password attempt for 'esp' from 192.168.5.1:65370 Aug 16 08:51:10 dropbear[4926]: Password auth succeeded for 'esp' from 192.168.5.1:65370 Aug 16 09:04:39 dropbear[4926]: Exit (esp) from <192.168.5.1:65370>: Keepalive timeout Aug 16 21:08:25 dropbear[5150]: Child connection from 134.89.29.111:54239 Aug 16 21:08:25 dropbear[5150]: Exit before auth from <134.89.29.111:54239>: Exited normally Aug 17 06:30:50 dropbear[5311]: Child connection from 192.168.5.1:41054 Aug 17 06:30:52 dropbear[5311]: Exit before auth from <192.168.5.1:41054>: Exited normally Aug 17 14:08:51 dropbear[5441]: Child connection from 134.89.28.206:56255 Aug 17 14:08:51 dropbear[5441]: Exit before auth from <134.89.28.206:56255>: Exited normally Aug 17 15:29:05 syslogd started: BusyBox v1.11.2 Aug 17 15:29:05 syslogd exiting Aug 17 15:29:05 syslogd started: BusyBox v1.11.2 Aug 17 15:29:07 kernel: [ 18.54] PPP generic driver version 2.4.2 Aug 17 15:29:07 pppd[708]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 17 15:29:07 pppd[708]: Using interface ppp2 Aug 17 15:29:07 pppd[708]: Connect: ppp2 <--> /dev/platform Aug 17 15:29:10 kernel: [ 22.35] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 17 15:29:10 kernel: [ 22.35] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 17 15:29:12 chronyd[790]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 17 15:29:12 chronyd[790]: Running with root privileges Aug 17 15:29:12 chronyd[790]: Frequency 27.351 +/- 0.602 ppm read from /var/lib/chrony/chrony.drift Aug 17 15:29:12 chronyd[790]: Timezone right/UTC failed leap second check, ignoring Aug 17 15:29:14 dnsmasq[814]: started, version 2.84 cachesize 150 Aug 17 15:29:14 dnsmasq[814]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 17 15:29:14 dnsmasq-tftp[814]: TFTP root is /card/tftp Aug 17 15:29:14 dnsmasq[814]: using only locally-known addresses for domain esp Aug 17 15:29:14 dnsmasq[814]: no servers found in /etc/resolv.conf, will retry Aug 17 15:29:14 dnsmasq[814]: read /etc/hosts - 5 addresses Aug 17 15:29:15 dnsmasq[814]: read /etc/hosts - 6 addresses Aug 17 15:29:16 dnsmasq[814]: read /etc/hosts - 6 addresses Aug 17 15:29:17 dnsmasq[814]: read /etc/hosts - 6 addresses Aug 17 15:29:17 udhcpc[856]: eth0: DHCP bound wired to 134.89.29.121 with DNS 134.89.10.10 134.89.12.87 Aug 17 15:29:17 dnsmasq[814]: reading /etc/resolv.conf Aug 17 15:29:17 dnsmasq[814]: using only locally-known addresses for domain esp Aug 17 15:29:17 dnsmasq[814]: using nameserver 192.168.5.1#53 Aug 17 15:29:18 dnsmasq[814]: reading /etc/resolv.conf Aug 17 15:29:18 dnsmasq[814]: using only locally-known addresses for domain esp Aug 17 15:29:18 dnsmasq[814]: using nameserver 192.168.5.1#53 Aug 17 15:29:18 dnsmasq[814]: read /etc/hosts - 6 addresses Aug 17 15:29:22 rpc.statd[977]: Version 1.1.0 Starting Aug 17 15:29:22 rpc.statd[977]: Flags: Aug 17 15:29:23 dropbear[1000]: Child connection from 134.89.29.109:49418 Aug 17 15:29:28 dropbear[1000]: Password auth succeeded for 'esp' from 134.89.29.109:49418 Aug 17 15:29:37 pppd[708]: LCP: timeout sending Config-Requests Aug 17 15:29:45 chronyd[790]: Selected source 134.89.2.91 (ESPshore) Aug 17 15:29:45 chronyd[790]: System clock wrong by -1.629591 seconds Aug 17 15:29:43 chronyd[790]: System clock was stepped by -1.629591 seconds Aug 17 15:29:49 dropbear[1000]: Exit (esp) from <134.89.29.109:49418>: Disconnect received Aug 17 15:30:18 dropbear[1039]: Child connection from 134.89.29.109:43422 Aug 17 15:30:22 dropbear[1039]: Password auth succeeded for 'esp' from 134.89.29.109:43422 Aug 17 21:43:12 syslogd started: BusyBox v1.11.2 Aug 17 21:43:12 syslogd exiting Aug 17 21:43:12 syslogd started: BusyBox v1.11.2 Aug 17 21:43:14 kernel: [ 15.34] PPP generic driver version 2.4.2 Aug 17 21:43:14 pppd[714]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 17 21:43:14 pppd[714]: Using interface ppp2 Aug 17 21:43:14 pppd[714]: Connect: ppp2 <--> /dev/platform Aug 17 21:43:17 kernel: [ 19.13] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 17 21:43:17 kernel: [ 19.13] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 17 21:43:19 chronyd[796]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 17 21:43:19 chronyd[796]: Running with root privileges Aug 17 21:43:19 chronyd[796]: Frequency 27.351 +/- 0.602 ppm read from /var/lib/chrony/chrony.drift Aug 17 21:43:19 chronyd[796]: Timezone right/UTC failed leap second check, ignoring Aug 17 21:43:21 dnsmasq[820]: started, version 2.84 cachesize 150 Aug 17 21:43:21 dnsmasq[820]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 17 21:43:21 dnsmasq-tftp[820]: TFTP root is /card/tftp Aug 17 21:43:21 dnsmasq[820]: using only locally-known addresses for domain esp Aug 17 21:43:21 dnsmasq[820]: no servers found in /etc/resolv.conf, will retry Aug 17 21:43:21 dnsmasq[820]: read /etc/hosts - 5 addresses Aug 17 21:43:22 dnsmasq[820]: read /etc/hosts - 6 addresses Aug 17 21:43:23 dnsmasq[820]: read /etc/hosts - 6 addresses Aug 17 21:43:24 dnsmasq[820]: read /etc/hosts - 6 addresses Aug 17 21:43:24 udhcpc[862]: eth0: DHCP bound wired to 134.89.29.121 with DNS 134.89.10.10 134.89.12.87 Aug 17 21:43:24 dnsmasq[820]: reading /etc/resolv.conf Aug 17 21:43:24 dnsmasq[820]: using only locally-known addresses for domain esp Aug 17 21:43:24 dnsmasq[820]: using nameserver 192.168.5.1#53 Aug 17 21:43:25 dnsmasq[820]: reading /etc/resolv.conf Aug 17 21:43:25 dnsmasq[820]: using only locally-known addresses for domain esp Aug 17 21:43:25 dnsmasq[820]: using nameserver 192.168.5.1#53 Aug 17 21:43:25 dnsmasq[820]: read /etc/hosts - 6 addresses Aug 17 21:43:28 rpc.statd[982]: Version 1.1.0 Starting Aug 17 21:43:28 rpc.statd[982]: Flags: Aug 17 21:43:30 dropbear[1017]: Child connection from 134.89.29.109:48274 Aug 17 21:43:33 dropbear[1017]: Password auth succeeded for 'esp' from 134.89.29.109:48274 Aug 17 21:43:44 pppd[714]: LCP: timeout sending Config-Requests Aug 17 21:43:46 dropbear[1017]: Exit (esp) from <134.89.29.109:48274>: Disconnect received Aug 17 21:43:52 chronyd[796]: Selected source 134.89.2.91 (ESPshore) Aug 17 21:43:52 chronyd[796]: System clock wrong by -1.654461 seconds Aug 17 21:43:50 chronyd[796]: System clock was stepped by -1.654461 seconds Aug 17 21:44:04 dropbear[1042]: Child connection from 134.89.29.109:42796 Aug 17 21:44:11 dropbear[1042]: Password auth succeeded for 'esp' from 134.89.29.109:42796 Aug 17 22:36:06 dropbear[1062]: Child connection from 134.89.29.109:33588 Aug 17 22:36:10 dropbear[1062]: Password auth succeeded for 'esp' from 134.89.29.109:33588 Aug 17 23:04:44 syslogd started: BusyBox v1.11.2 Aug 17 23:04:44 syslogd exiting Aug 17 23:04:44 syslogd started: BusyBox v1.11.2 Aug 17 23:04:46 kernel: [ 15.48] PPP generic driver version 2.4.2 Aug 17 23:04:46 pppd[714]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 17 23:04:46 pppd[714]: Using interface ppp2 Aug 17 23:04:46 pppd[714]: Connect: ppp2 <--> /dev/platform Aug 17 23:04:49 kernel: [ 19.28] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 17 23:04:49 kernel: [ 19.28] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 17 23:04:51 chronyd[797]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 17 23:04:51 chronyd[797]: Running with root privileges Aug 17 23:04:51 chronyd[797]: Frequency 22.347 +/- 0.057 ppm read from /var/lib/chrony/chrony.drift Aug 17 23:04:51 chronyd[797]: Timezone right/UTC failed leap second check, ignoring Aug 17 23:04:53 dnsmasq[821]: started, version 2.84 cachesize 150 Aug 17 23:04:53 dnsmasq[821]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 17 23:04:53 dnsmasq-tftp[821]: TFTP root is /card/tftp Aug 17 23:04:53 dnsmasq[821]: using only locally-known addresses for domain esp Aug 17 23:04:53 dnsmasq[821]: no servers found in /etc/resolv.conf, will retry Aug 17 23:04:53 dnsmasq[821]: read /etc/hosts - 5 addresses Aug 17 23:04:54 dnsmasq[821]: read /etc/hosts - 6 addresses Aug 17 23:04:55 dnsmasq[821]: read /etc/hosts - 6 addresses Aug 17 23:04:56 dnsmasq[821]: read /etc/hosts - 6 addresses Aug 17 23:04:56 udhcpc[863]: eth0: DHCP bound wired to 134.89.29.121 with DNS 134.89.10.10 134.89.12.87 Aug 17 23:04:56 dnsmasq[821]: reading /etc/resolv.conf Aug 17 23:04:56 dnsmasq[821]: using only locally-known addresses for domain esp Aug 17 23:04:56 dnsmasq[821]: using nameserver 192.168.5.1#53 Aug 17 23:04:57 dnsmasq[821]: reading /etc/resolv.conf Aug 17 23:04:57 dnsmasq[821]: using only locally-known addresses for domain esp Aug 17 23:04:57 dnsmasq[821]: using nameserver 192.168.5.1#53 Aug 17 23:04:57 dnsmasq[821]: read /etc/hosts - 6 addresses Aug 17 23:05:00 rpc.statd[983]: Version 1.1.0 Starting Aug 17 23:05:00 rpc.statd[983]: Flags: Aug 17 23:05:16 pppd[714]: LCP: timeout sending Config-Requests Aug 17 23:05:24 chronyd[797]: Selected source 134.89.2.91 (ESPshore) Aug 17 23:05:24 chronyd[797]: System clock wrong by -1.656471 seconds Aug 17 23:05:22 chronyd[797]: System clock was stepped by -1.656471 seconds Aug 17 23:11:57 dropbear[1029]: Child connection from 134.89.29.109:34042 Aug 17 23:12:00 dropbear[1029]: Password auth succeeded for 'esp' from 134.89.29.109:34042 Aug 17 23:12:13 dropbear[1029]: Exit (esp) from <134.89.29.109:34042>: Disconnect received Aug 17 23:12:20 dropbear[1045]: Child connection from 134.89.29.109:46428 Aug 17 23:12:24 dropbear[1045]: Password auth succeeded for 'esp' from 134.89.29.109:46428 Aug 18 07:09:30 kernel: [29101.85] ks8851_mll ks8851_mll.0 eth0: BUSY Aug 18 07:09:30 dropbear[1201]: Child connection from 134.89.28.206:52902 Aug 18 07:09:30 dropbear[1201]: Exit before auth from <134.89.28.206:52902>: Exited normally Aug 18 14:14:25 dropbear[1045]: Exit (esp) from <134.89.29.109:46428>: Disconnect received Aug 18 14:14:28 dropbear[1319]: Child connection from 134.89.29.109:33668 Aug 18 14:14:32 dropbear[1319]: Bad password attempt for 'esp' from 134.89.29.109:33668 Aug 18 14:14:35 dropbear[1319]: Password auth succeeded for 'esp' from 134.89.29.109:33668 Aug 18 14:14:46 dropbear[1319]: Exit (esp) from <134.89.29.109:33668>: Disconnect received Aug 18 14:25:19 syslogd started: BusyBox v1.11.2 Aug 18 14:25:19 syslogd exiting Aug 18 14:25:19 syslogd started: BusyBox v1.11.2 Aug 18 14:25:21 kernel: [ 15.31] PPP generic driver version 2.4.2 Aug 18 14:25:21 pppd[712]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 18 14:25:21 pppd[712]: Using interface ppp2 Aug 18 14:25:21 pppd[712]: Connect: ppp2 <--> /dev/platform Aug 18 14:25:24 kernel: [ 19.10] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 18 14:25:24 kernel: [ 19.10] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 18 14:25:26 chronyd[794]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 18 14:25:26 chronyd[794]: Running with root privileges Aug 18 14:25:26 chronyd[794]: Frequency 27.124 +/- 1.358 ppm read from /var/lib/chrony/chrony.drift Aug 18 14:25:26 chronyd[794]: Timezone right/UTC failed leap second check, ignoring Aug 18 14:25:28 dnsmasq[818]: started, version 2.84 cachesize 150 Aug 18 14:25:28 dnsmasq[818]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 18 14:25:28 dnsmasq-tftp[818]: TFTP root is /card/tftp Aug 18 14:25:28 dnsmasq[818]: using only locally-known addresses for domain esp Aug 18 14:25:28 dnsmasq[818]: no servers found in /etc/resolv.conf, will retry Aug 18 14:25:28 dnsmasq[818]: read /etc/hosts - 5 addresses Aug 18 14:25:29 dnsmasq[818]: read /etc/hosts - 6 addresses Aug 18 14:25:30 dnsmasq[818]: read /etc/hosts - 6 addresses Aug 18 14:25:31 dnsmasq[818]: read /etc/hosts - 6 addresses Aug 18 14:25:31 udhcpc[860]: eth0: DHCP bound wired to 134.89.29.121 with DNS 134.89.10.10 134.89.12.87 Aug 18 14:25:31 dnsmasq[818]: reading /etc/resolv.conf Aug 18 14:25:31 dnsmasq[818]: using only locally-known addresses for domain esp Aug 18 14:25:31 dnsmasq[818]: using nameserver 192.168.5.1#53 Aug 18 14:25:32 dnsmasq[818]: reading /etc/resolv.conf Aug 18 14:25:32 dnsmasq[818]: using only locally-known addresses for domain esp Aug 18 14:25:32 dnsmasq[818]: using nameserver 192.168.5.1#53 Aug 18 14:25:32 dnsmasq[818]: read /etc/hosts - 6 addresses Aug 18 14:25:36 rpc.statd[980]: Version 1.1.0 Starting Aug 18 14:25:36 rpc.statd[980]: Flags: Aug 18 14:25:51 pppd[712]: LCP: timeout sending Config-Requests Aug 18 14:26:01 chronyd[794]: Selected source 134.89.2.91 (ESPshore) Aug 18 14:26:01 chronyd[794]: System clock wrong by -1.712900 seconds Aug 18 14:25:59 chronyd[794]: System clock was stepped by -1.712900 seconds Aug 18 14:26:12 dropbear[1025]: Child connection from 134.89.28.217:52458 Aug 18 14:26:16 dropbear[1025]: Password auth succeeded for 'esp' from 134.89.28.217:52458 Aug 18 20:07:00 dropbear[1136]: Child connection from 192.168.5.1:54339 Aug 18 20:07:05 dropbear[1136]: Password auth succeeded for 'esp' from 192.168.5.1:54339 Aug 18 20:07:20 kernel: [20536.87] ks8851_mll ks8851_mll.0 eth0: BUSY Aug 18 20:07:39 dropbear[1136]: Exit (esp) from <192.168.5.1:54339>: Disconnect received Aug 18 20:19:52 dropbear[1148]: Child connection from 192.168.5.1:55020 Aug 18 20:19:55 dropbear[1148]: Password auth succeeded for 'esp' from 192.168.5.1:55020 Aug 19 00:10:05 dropbear[1227]: Child connection from 134.89.28.206:50653 Aug 19 00:10:05 dropbear[1227]: Exit before auth from <134.89.28.206:50653>: Exited normally Aug 19 04:43:43 dropbear[1148]: Exit (esp) from <192.168.5.1:55020>: Disconnect received Aug 19 08:36:19 dropbear[1371]: Child connection from 134.89.28.217:46506 Aug 19 08:36:22 dropbear[1371]: Password auth succeeded for 'esp' from 134.89.28.217:46506 Aug 19 09:06:05 dropbear[1395]: Child connection from 134.89.12.141:64066 Aug 19 09:06:06 dropbear[1395]: Exit before auth from <134.89.12.141:64066>: Exited normally Aug 19 09:06:07 dropbear[1398]: Child connection from 134.89.12.141:64100 Aug 19 09:06:07 dropbear[1398]: Exit before auth from <134.89.12.141:64100>: Disconnect received Aug 19 09:06:07 dropbear[1399]: Child connection from 134.89.12.141:64108 Aug 19 09:06:08 dropbear[1399]: Login attempt for nonexistent user Aug 19 09:06:08 dropbear[1399]: Exit before auth from <134.89.12.141:64108>: Disconnect received Aug 19 09:06:08 dropbear[1400]: Child connection from 134.89.12.141:64115 Aug 19 09:06:09 dropbear[1400]: Login attempt for nonexistent user Aug 19 09:06:09 dropbear[1400]: Exit before auth from <134.89.12.141:64115>: Disconnect received Aug 19 09:06:09 dropbear[1401]: Child connection from 134.89.12.141:64117 Aug 19 09:06:09 dropbear[1401]: Login attempt for nonexistent user Aug 19 09:06:10 dropbear[1401]: Exit before auth from <134.89.12.141:64117>: Disconnect received Aug 19 09:06:10 dropbear[1402]: Child connection from 134.89.12.141:64130 Aug 19 09:06:10 dropbear[1402]: Login attempt for nonexistent user Aug 19 09:06:11 dropbear[1402]: Exit before auth from <134.89.12.141:64130>: Disconnect received Aug 19 09:06:11 dropbear[1403]: Child connection from 134.89.12.141:64132 Aug 19 09:06:11 dropbear[1403]: Login attempt for nonexistent user Aug 19 09:06:11 dropbear[1403]: Exit before auth from <134.89.12.141:64132>: Disconnect received Aug 19 09:06:11 dropbear[1404]: Child connection from 134.89.12.141:64139 Aug 19 09:06:12 dropbear[1404]: Login attempt for nonexistent user Aug 19 09:06:12 dropbear[1404]: Exit before auth from <134.89.12.141:64139>: Disconnect received Aug 19 12:22:24 dropbear[1025]: Exit (esp) from <134.89.28.217:52458>: Disconnect received Aug 19 12:22:26 dropbear[1371]: Exit (esp) from <134.89.28.217:46506>: Disconnect received Aug 19 13:55:08 syslogd started: BusyBox v1.11.2 Aug 19 13:55:08 syslogd exiting Aug 19 13:55:08 syslogd started: BusyBox v1.11.2 Aug 19 13:55:09 kernel: [ 15.02] PPP generic driver version 2.4.2 Aug 19 13:55:10 pppd[712]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 19 13:55:10 pppd[712]: Using interface ppp2 Aug 19 13:55:10 pppd[712]: Connect: ppp2 <--> /dev/platform Aug 19 13:55:13 kernel: [ 18.85] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 19 13:55:13 kernel: [ 18.85] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 19 13:55:15 chronyd[798]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 19 13:55:15 chronyd[798]: Running with root privileges Aug 19 13:55:15 chronyd[798]: Frequency 23.585 +/- 0.145 ppm read from /var/lib/chrony/chrony.drift Aug 19 13:55:15 chronyd[798]: Timezone right/UTC failed leap second check, ignoring Aug 19 13:55:17 dnsmasq[822]: started, version 2.84 cachesize 150 Aug 19 13:55:17 dnsmasq[822]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 19 13:55:17 dnsmasq-tftp[822]: TFTP root is /card/tftp Aug 19 13:55:17 dnsmasq[822]: using only locally-known addresses for domain esp Aug 19 13:55:17 dnsmasq[822]: no servers found in /etc/resolv.conf, will retry Aug 19 13:55:17 dnsmasq[822]: read /etc/hosts - 5 addresses Aug 19 13:55:18 dnsmasq[822]: read /etc/hosts - 6 addresses Aug 19 13:55:19 dnsmasq[822]: read /etc/hosts - 6 addresses Aug 19 13:55:20 dnsmasq[822]: read /etc/hosts - 6 addresses Aug 19 13:55:20 udhcpc[864]: eth0: DHCP bound wired to 134.89.29.121 with DNS 134.89.10.10 134.89.12.87 Aug 19 13:55:20 dnsmasq[822]: reading /etc/resolv.conf Aug 19 13:55:20 dnsmasq[822]: using only locally-known addresses for domain esp Aug 19 13:55:20 dnsmasq[822]: using nameserver 192.168.5.1#53 Aug 19 13:55:21 dnsmasq[822]: reading /etc/resolv.conf Aug 19 13:55:21 dnsmasq[822]: using only locally-known addresses for domain esp Aug 19 13:55:21 dnsmasq[822]: using nameserver 192.168.5.1#53 Aug 19 13:55:21 dnsmasq[822]: read /etc/hosts - 6 addresses Aug 19 13:55:24 rpc.statd[984]: Version 1.1.0 Starting Aug 19 13:55:24 rpc.statd[984]: Flags: Aug 19 13:55:40 pppd[712]: LCP: timeout sending Config-Requests Aug 19 13:55:50 chronyd[798]: Selected source 134.89.2.91 (ESPshore) Aug 19 13:55:50 chronyd[798]: System clock wrong by -1.837167 seconds Aug 19 13:55:48 chronyd[798]: System clock was stepped by -1.837167 seconds Aug 19 14:07:14 dropbear[1030]: Child connection from 134.89.29.109:33218 Aug 19 14:07:18 dropbear[1030]: Password auth succeeded for 'esp' from 134.89.29.109:33218 Aug 19 14:07:37 dropbear[1030]: Exit (esp) from <134.89.29.109:33218>: Disconnect received Aug 19 14:07:40 dropbear[1045]: Child connection from 134.89.29.109:42650 Aug 19 14:07:44 dropbear[1045]: Password auth succeeded for 'esp' from 134.89.29.109:42650 Aug 19 14:14:42 dropbear[1061]: Child connection from 134.89.29.109:34116 Aug 19 14:14:46 dropbear[1061]: Bad password attempt for 'esp' from 134.89.29.109:34116 Aug 19 14:14:49 dropbear[1061]: Password auth succeeded for 'esp' from 134.89.29.109:34116 Aug 19 16:51:41 dropbear[1114]: Child connection from 134.89.114.0:61137 Aug 19 16:51:49 dropbear[1114]: Bad password attempt for 'esp' from 134.89.114.0:61137 Aug 19 16:51:51 dropbear[1114]: Password auth succeeded for 'esp' from 134.89.114.0:61137 Aug 19 16:52:25 kernel: [10652.52] ks8851_mll ks8851_mll.0 eth0: BUSY Aug 19 17:08:17 dropbear[1132]: Child connection from 134.89.28.210:43056 Aug 19 17:08:18 dropbear[1132]: Pubkey auth succeeded for 'root' with key sha1!! 85:fb:60:45:3b:f0:52:33:7f:d8:e3:8a:77:41:9d:de:83:54:f3:41 from 134.89.28.210:43056 Aug 19 17:11:35 dropbear[1139]: Child connection from 134.89.29.111:53788 Aug 19 17:11:35 dropbear[1139]: Exit before auth from <134.89.29.111:53788>: Exited normally Aug 19 17:29:56 dropbear[1114]: Exit (esp) from <134.89.114.0:61137>: Keepalive timeout Aug 19 17:45:43 dropbear[1132]: Exit (root) from <134.89.28.210:43056>: Disconnect received Aug 19 17:56:31 dropbear[1158]: Child connection from 134.89.28.205:64432 Aug 19 17:56:33 dropbear[1158]: Password auth succeeded for 'esp' from 134.89.28.205:64432 Aug 19 21:42:18 dropbear[1223]: Child connection from 192.168.5.1:54935 Aug 19 21:42:24 dropbear[1223]: Bad password attempt for 'esp' from 192.168.5.1:54935 Aug 19 21:42:27 dropbear[1223]: Password auth succeeded for 'esp' from 192.168.5.1:54935 Aug 19 21:54:25 dropbear[1223]: Exit (esp) from <192.168.5.1:54935>: Disconnect received Aug 19 22:47:02 dropbear[1158]: Exit (esp) from <134.89.28.205:64432>: Keepalive timeout Aug 20 07:42:18 dropbear[1410]: Child connection from 134.89.28.205:63335 Aug 20 07:42:21 dropbear[1410]: Password auth succeeded for 'esp' from 134.89.28.205:63335 Aug 20 10:10:46 dropbear[1465]: Child connection from 134.89.29.111:55777 Aug 20 10:10:46 dropbear[1465]: Exit before auth from <134.89.29.111:55777>: Exited normally Aug 20 10:56:37 dropbear[1410]: Exit (esp) from <134.89.28.205:63335>: Keepalive timeout Aug 20 11:13:49 dropbear[1485]: Child connection from 134.89.28.205:58124 Aug 20 11:13:52 dropbear[1485]: Password auth succeeded for 'esp' from 134.89.28.205:58124 Aug 20 12:23:37 dropbear[1513]: Child connection from 134.89.28.217:50440 Aug 20 12:23:40 dropbear[1513]: Password auth succeeded for 'esp' from 134.89.28.217:50440 Aug 20 21:33:54 dropbear[1485]: Exit (esp) from <134.89.28.205:58124>: Keepalive timeout Aug 21 03:12:58 dropbear[1774]: Child connection from 134.89.29.111:50633 Aug 21 03:12:58 dropbear[1774]: Exit before auth from <134.89.29.111:50633>: Exited normally Aug 21 09:06:10 dropbear[1883]: Child connection from 134.89.12.141:55243 Aug 21 09:06:10 dropbear[1883]: Exit before auth from <134.89.12.141:55243>: Exited normally Aug 21 09:06:13 dropbear[1886]: Child connection from 134.89.12.141:55294 Aug 21 09:06:14 dropbear[1886]: Exit before auth from <134.89.12.141:55294>: Disconnect received Aug 21 09:06:14 dropbear[1887]: Child connection from 134.89.12.141:55297 Aug 21 09:06:14 dropbear[1887]: Login attempt for nonexistent user Aug 21 09:06:15 dropbear[1887]: Exit before auth from <134.89.12.141:55297>: Disconnect received Aug 21 09:06:15 dropbear[1888]: Child connection from 134.89.12.141:55302 Aug 21 09:06:15 dropbear[1888]: Login attempt for nonexistent user Aug 21 09:06:15 dropbear[1888]: Exit before auth from <134.89.12.141:55302>: Disconnect received Aug 21 09:06:15 dropbear[1889]: Child connection from 134.89.12.141:55306 Aug 21 09:06:16 dropbear[1889]: Login attempt for nonexistent user Aug 21 09:06:16 dropbear[1889]: Exit before auth from <134.89.12.141:55306>: Disconnect received Aug 21 09:06:16 dropbear[1890]: Child connection from 134.89.12.141:55308 Aug 21 09:06:17 dropbear[1890]: Login attempt for nonexistent user Aug 21 09:06:17 dropbear[1890]: Exit before auth from <134.89.12.141:55308>: Disconnect received Aug 21 09:06:17 dropbear[1891]: Child connection from 134.89.12.141:55309 Aug 21 09:06:18 dropbear[1891]: Login attempt for nonexistent user Aug 21 09:06:18 dropbear[1891]: Exit before auth from <134.89.12.141:55309>: Disconnect received Aug 21 09:06:18 dropbear[1892]: Child connection from 134.89.12.141:55312 Aug 21 09:06:18 dropbear[1892]: Login attempt for nonexistent user Aug 21 09:06:19 dropbear[1892]: Exit before auth from <134.89.12.141:55312>: Disconnect received Aug 21 18:11:57 syslogd started: BusyBox v1.11.2 Aug 21 18:11:57 syslogd exiting Aug 21 18:11:57 syslogd started: BusyBox v1.11.2 Aug 21 18:11:58 kernel: [ 15.09] PPP generic driver version 2.4.2 Aug 21 18:11:59 pppd[714]: pppd 2.4.5-mbari3 started by root, uid 0 Aug 21 18:11:59 pppd[714]: Using interface ppp2 Aug 21 18:11:59 pppd[714]: Connect: ppp2 <--> /dev/platform Aug 21 18:12:02 kernel: [ 18.87] wireguard: WireGuard 1.0.20210424 loaded. See www.wireguard.com for information. Aug 21 18:12:02 kernel: [ 18.87] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Aug 21 18:12:04 chronyd[800]: chronyd version DEVELOPMENT starting (+CMDMON +NTP +REFCLOCK +RTC -PRIVDROP -SCFILTER -SIGND +ASYNCDNS -NTS -SECHASH -IPV6 -DEBUG) Aug 21 18:12:04 chronyd[800]: Running with root privileges Aug 21 18:12:04 chronyd[800]: Frequency 27.266 +/- 0.032 ppm read from /var/lib/chrony/chrony.drift Aug 21 18:12:04 chronyd[800]: Timezone right/UTC failed leap second check, ignoring Aug 21 18:12:06 dnsmasq[824]: started, version 2.84 cachesize 150 Aug 21 18:12:06 dnsmasq[824]: compile time options: IPv6 GNU-getopt no-DBus no-UBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack ipset auth no-cryptohash no-DNSSEC loop-detect no-inotify dumpfile Aug 21 18:12:06 dnsmasq-tftp[824]: TFTP root is /card/tftp Aug 21 18:12:06 dnsmasq[824]: using only locally-known addresses for domain esp Aug 21 18:12:06 dnsmasq[824]: no servers found in /etc/resolv.conf, will retry Aug 21 18:12:06 dnsmasq[824]: read /etc/hosts - 5 addresses Aug 21 18:12:07 dnsmasq[824]: read /etc/hosts - 6 addresses Aug 21 18:12:08 dnsmasq[824]: read /etc/hosts - 6 addresses Aug 21 18:12:09 dnsmasq[824]: read /etc/hosts - 6 addresses Aug 21 18:12:09 udhcpc[866]: eth0: DHCP bound wired to 134.89.29.121 with DNS 134.89.10.10 134.89.12.87 Aug 21 18:12:09 dnsmasq[824]: reading /etc/resolv.conf Aug 21 18:12:09 dnsmasq[824]: using only locally-known addresses for domain esp Aug 21 18:12:09 dnsmasq[824]: using nameserver 192.168.5.1#53 Aug 21 18:12:10 dnsmasq[824]: reading /etc/resolv.conf Aug 21 18:12:10 dnsmasq[824]: using only locally-known addresses for domain esp Aug 21 18:12:10 dnsmasq[824]: using nameserver 192.168.5.1#53 Aug 21 18:12:10 dnsmasq[824]: read /etc/hosts - 6 addresses Aug 21 18:12:13 rpc.statd[986]: Version 1.1.0 Starting Aug 21 18:12:13 rpc.statd[986]: Flags: Aug 21 18:12:29 pppd[714]: LCP: timeout sending Config-Requests Aug 21 18:12:30 dropbear[1021]: Child connection from 134.89.29.109:39220 Aug 21 18:12:33 dropbear[1021]: Password auth succeeded for 'esp' from 134.89.29.109:39220 Aug 21 18:12:37 chronyd[800]: Selected source 134.89.2.91 (ESPshore) Aug 21 18:12:37 chronyd[800]: System clock wrong by -2.034096 seconds Aug 21 18:12:35 chronyd[800]: System clock was stepped by -2.034096 seconds Aug 21 19:10:52 dropbear[1053]: Child connection from 134.89.29.109:59790 Aug 21 19:10:54 dropbear[1053]: Password auth succeeded for 'esp' from 134.89.29.109:59790