API tools faq
paste
Advertisement
Guest User

log auth

a guest
Jan 5th, 2017
160
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 131.78 KB | None | 0 0
raw download clone embed print report
  1. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2127]: debug3: fd 5 is not O_NONBLOCK
  2. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2127]: debug1: Forked child 2244.
  3. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: entering fd = 8 config len 724
  4. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2127]: debug3: ssh_msg_send: type 0
  5. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug3: oom_adjust_restore
  6. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: done
  7. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: Set /proc/self/oom_score_adj to 0
  8. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8
  9. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug1: inetd sockets after dupping: 3, 3
  10. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: Connection from 113.195.145.52 port 48932 on 172.31.1.100 port 22
  11. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug1: Client protocol version 2.0; client software version PUTTY
  12. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug1: no match: PUTTY
  13. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug1: Enabling compatibility mode for protocol 2.0
  14. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug1: Local version string SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3
  15. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug2: fd 3 setting O_NONBLOCK
  16. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug2: Network child is on pid 2245
  17. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug3: preauth child monitor started
  18. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug3: privsep user:group 104:65534 [preauth]
  19. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug1: permanently_set_uid: 104/65534 [preauth]
  20. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  21. Jan 5 12:59:02 Debian-85-jessie-64-LAMP sshd[2244]: debug1: SSH2_MSG_KEXINIT sent [preauth]
  22. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2127]: debug3: fd 5 is not O_NONBLOCK
  23. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2127]: debug1: Forked child 2246.
  24. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: entering fd = 9 config len 724
  25. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2127]: debug3: ssh_msg_send: type 0
  26. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: done
  27. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: oom_adjust_restore
  28. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: Set /proc/self/oom_score_adj to 0
  29. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: rexec start in 5 out 5 newsock 5 pipe 8 sock 9
  30. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: inetd sockets after dupping: 3, 3
  31. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: Connection from x.x.x.x port 61732 on 172.31.1.100 port 22
  32. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: Client protocol version 2.0; client software version PuTTY_Release_0.67
  33. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: no match: PuTTY_Release_0.67
  34. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: Enabling compatibility mode for protocol 2.0
  35. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: Local version string SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3
  36. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: fd 3 setting O_NONBLOCK
  37. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: Network child is on pid 2247
  38. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: preauth child monitor started
  39. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: privsep user:group 104:65534 [preauth]
  40. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: permanently_set_uid: 104/65534 [preauth]
  41. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  42. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: SSH2_MSG_KEXINIT sent [preauth]
  43. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: SSH2_MSG_KEXINIT received [preauth]
  44. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 [preauth]
  45. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  46. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  47. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  48. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  49. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  50. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  51. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  52. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: [preauth]
  53. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: [preauth]
  54. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  55. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  56. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1 [preauth]
  57. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: ssh-rsa,ssh-dss [preauth]
  58. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]
  59. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]
  60. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5 [preauth]
  61. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5 [preauth]
  62. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: none,zlib [preauth]
  63. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: none,zlib [preauth]
  64. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: [preauth]
  65. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: [preauth]
  66. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  67. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  68. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: mac_setup: setup hmac-sha2-256 [preauth]
  69. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: kex: client->server aes256-ctr hmac-sha2-256 none [preauth]
  70. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: mac_setup: setup hmac-sha2-256 [preauth]
  71. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: kex: server->client aes256-ctr hmac-sha2-256 none [preauth]
  72. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: SSH2_MSG_KEX_DH_GEX_REQUEST received [preauth]
  73. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 0 [preauth]
  74. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_choose_dh: waiting for MONITOR_ANS_MODULI [preauth]
  75. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive_expect entering: type 1 [preauth]
  76. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering [preauth]
  77. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering
  78. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: monitor_read: checking request 0
  79. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_answer_moduli: got parameters: 1024 4096 8192
  80. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 1
  81. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: monitor_read: 0 used once, disabling now
  82. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_choose_dh: remaining 0 [preauth]
  83. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: SSH2_MSG_KEX_DH_GEX_GROUP sent [preauth]
  84. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: bits set: 2053/4096 [preauth]
  85. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: expecting SSH2_MSG_KEX_DH_GEX_INIT [preauth]
  86. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: bits set: 2009/4096 [preauth]
  87. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_key_sign entering [preauth]
  88. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 6 [preauth]
  89. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering
  90. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: monitor_read: checking request 6
  91. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_answer_sign
  92. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_answer_sign: signature 0x7f9678d8c8d0(271)
  93. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 7
  94. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: monitor_read: 6 used once, disabling now
  95. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]
  96. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive_expect entering: type 7 [preauth]
  97. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering [preauth]
  98. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: SSH2_MSG_KEX_DH_GEX_REPLY sent [preauth]
  99. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: kex_derive_keys [preauth]
  100. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug2: set_newkeys: mode 1 [preauth]
  101. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: SSH2_MSG_NEWKEYS sent [preauth]
  102. Jan 5 12:59:05 Debian-85-jessie-64-LAMP sshd[2246]: debug1: expecting SSH2_MSG_NEWKEYS [preauth]
  103. Jan 5 12:59:06 Debian-85-jessie-64-LAMP sshd[2246]: debug2: set_newkeys: mode 0 [preauth]
  104. Jan 5 12:59:06 Debian-85-jessie-64-LAMP sshd[2246]: debug1: SSH2_MSG_NEWKEYS received [preauth]
  105. Jan 5 12:59:06 Debian-85-jessie-64-LAMP sshd[2246]: debug1: KEX done [preauth]
  106. Jan 5 12:59:07 Debian-85-jessie-64-LAMP sshd[2244]: Received disconnect from 113.195.145.52: 11: [preauth]
  107. Jan 5 12:59:07 Debian-85-jessie-64-LAMP sshd[2244]: debug1: do_cleanup [preauth]
  108. Jan 5 12:59:07 Debian-85-jessie-64-LAMP sshd[2244]: debug3: PAM: sshpam_thread_cleanup entering [preauth]
  109. Jan 5 12:59:07 Debian-85-jessie-64-LAMP sshd[2244]: debug1: monitor_read_log: child log fd closed
  110. Jan 5 12:59:07 Debian-85-jessie-64-LAMP sshd[2244]: debug3: mm_request_receive entering
  111. Jan 5 12:59:07 Debian-85-jessie-64-LAMP sshd[2244]: debug1: do_cleanup
  112. Jan 5 12:59:07 Debian-85-jessie-64-LAMP sshd[2244]: debug3: PAM: sshpam_thread_cleanup entering
  113. Jan 5 12:59:07 Debian-85-jessie-64-LAMP sshd[2244]: debug1: Killing privsep child 2245
  114. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug1: userauth-request for user drwebmedia2 service ssh-connection method none [preauth]
  115. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug1: attempt 0 failures 0 [preauth]
  116. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_getpwnamallow entering [preauth]
  117. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 8 [preauth]
  118. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
  119. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive_expect entering: type 9 [preauth]
  120. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering [preauth]
  121. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering
  122. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: monitor_read: checking request 8
  123. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_answer_pwnamallow
  124. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: Trying to reverse map address x.x.x.x.
  125. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug2: parse_server_config: config reprocess config len 724
  126. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
  127. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 9
  128. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug2: monitor_read: 8 used once, disabling now
  129. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug2: input_userauth_request: setting up authctxt for drwebmedia2 [preauth]
  130. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_start_pam entering [preauth]
  131. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 100 [preauth]
  132. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_inform_authserv entering [preauth]
  133. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 4 [preauth]
  134. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug2: input_userauth_request: try method none [preauth]
  135. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  136. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering
  137. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: monitor_read: checking request 100
  138. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug1: PAM: initializing for "drwebmedia2"
  139. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug1: PAM: setting PAM_RHOST to "host154-40-static.8-79-b.business.telecomitalia.it"
  140. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug1: PAM: setting PAM_TTY to "ssh"
  141. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug2: monitor_read: 100 used once, disabling now
  142. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering
  143. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: monitor_read: checking request 4
  144. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_answer_authserv: service=ssh-connection, style=, role=
  145. Jan 5 12:59:12 Debian-85-jessie-64-LAMP sshd[2246]: debug2: monitor_read: 4 used once, disabling now
  146. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: userauth-request for user drwebmedia2 service ssh-connection method password [preauth]
  147. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: attempt 1 failures 0 [preauth]
  148. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug2: input_userauth_request: try method password [preauth]
  149. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_auth_password entering [preauth]
  150. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 12 [preauth]
  151. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  152. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  153. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering [preauth]
  154. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering
  155. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: monitor_read: checking request 12
  156. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  157. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: PAM: password authentication accepted for drwebmedia2
  158. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_answer_authpassword: sending result 1
  159. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 13
  160. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive_expect entering: type 102
  161. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering
  162. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: do_pam_account: called
  163. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: PAM: do_pam_account pam_acct_mgmt = 0 (Success)
  164. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 103
  165. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: Accepted password for drwebmedia2 from x.x.x.x port 61732 ssh2
  166. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: monitor_child_preauth: drwebmedia2 has been authenticated by privileged process
  167. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_get_keystate: Waiting for new keys
  168. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive_expect entering: type 26
  169. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering
  170. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_newkeys_from_blob: 0x7f9678d8f870(159)
  171. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug2: mac_setup: setup hmac-sha2-256
  172. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_get_keystate: Waiting for second key
  173. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_newkeys_from_blob: 0x7f9678d8f870(159)
  174. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug2: mac_setup: setup hmac-sha2-256
  175. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_get_keystate: Getting compression state
  176. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_get_keystate: Getting Network I/O buffers
  177. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_auth_password: user authenticated [preauth]
  178. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_do_pam_account entering [preauth]
  179. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 102 [preauth]
  180. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive_expect entering: type 103 [preauth]
  181. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering [preauth]
  182. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_do_pam_account returning 1 [preauth]
  183. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_send_keystate: Sending new keys: 0x7f9678d88960 0x7f9678d88360 [preauth]
  184. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_newkeys_to_blob: converting 0x7f9678d88960 [preauth]
  185. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_newkeys_to_blob: converting 0x7f9678d88360 [preauth]
  186. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_send_keystate: New keys have been sent [preauth]
  187. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_send_keystate: Sending compression state [preauth]
  188. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 26 [preauth]
  189. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_send_keystate: Finished sending state [preauth]
  190. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: monitor_read_log: child log fd closed
  191. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_share_sync: Share sync
  192. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_share_sync: Share sync end
  193. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: PAM: establishing credentials
  194. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: PAM: opening session
  195. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: pam_unix(sshd:session): session opened for user drwebmedia2 by (uid=0)
  196. Jan 5 12:59:16 Debian-85-jessie-64-LAMP systemd-logind[588]: New session 6 of user drwebmedia2.
  197. Jan 5 12:59:16 Debian-85-jessie-64-LAMP systemd: pam_unix(systemd-user:session): session opened for user drwebmedia2 by (uid=0)
  198. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: PAM: sshpam_store_conv called with 1 messages
  199. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: User child is on pid 2251
  200. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: SELinux support disabled
  201. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: PAM: establishing credentials
  202. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: permanently_set_uid: 1000/100
  203. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: set_newkeys: mode 0
  204. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: set_newkeys: mode 1
  205. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: packet_set_postauth: called
  206. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: Entering interactive session for SSH2.
  207. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: fd 6 setting O_NONBLOCK
  208. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: fd 8 setting O_NONBLOCK
  209. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: server_init_dispatch_20
  210. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: Received SSH2_MSG_IGNORE
  211. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: server_input_channel_open: ctype session rchan 256 win 16384 max 16384
  212. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: input_session_request
  213. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: channel 0: new [server-session]
  214. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: session_new: allocate (allocated 0 max 10)
  215. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: session_unused: session id 0 unused
  216. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_new: session 0
  217. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_open: channel 0
  218. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_open: session 0: link with channel 0
  219. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: server_input_channel_open: confirm session
  220. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: server_input_channel_req: channel 0 request pty-req reply 1
  221. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_by_channel: session 0 channel 0
  222. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_input_channel_req: session 0 req pty-req
  223. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: Allocating pty.
  224. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: mm_request_send entering: type 28
  225. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: mm_pty_allocate: waiting for MONITOR_ANS_PTY
  226. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: mm_request_receive_expect entering: type 29
  227. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: mm_request_receive entering
  228. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering
  229. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: monitor_read: checking request 28
  230. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_answer_pty entering
  231. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug2: session_new: allocate (allocated 0 max 10)
  232. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: session_unused: session id 0 unused
  233. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: session_new: session 0
  234. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: SELinux support disabled
  235. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_send entering: type 29
  236. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_answer_pty: tty /dev/pts/1 ptyfd 4
  237. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_pty_req: session 0 alloc /dev/pts/1
  238. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: server_input_channel_req: channel 0 request shell reply 1
  239. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_by_channel: session 0 channel 0
  240. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_input_channel_req: session 0 req shell
  241. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: Starting session: shell on pts/1 for drwebmedia2 from x.x.x.x port 61732
  242. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: fd 3 setting TCP_NODELAY
  243. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: packet_set_tos: set IP_TOS 0x10
  244. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: rfd 11 isatty
  245. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: fd 11 setting O_NONBLOCK
  246. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: fd 9 is O_NONBLOCK
  247. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2252]: debug1: Setting controlling tty using TIOCSCTTY.
  248. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2252]: debug3: Copy environment: XDG_SESSION_ID=6
  249. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2252]: debug3: Copy environment: XDG_RUNTIME_DIR=/run/user/1000
  250. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2252]: debug3: Copy environment: LANG=en_US.UTF-8
  251. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2252]: debug3: Copy environment: LANGUAGE=en_US:en
  252. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: read<=0 rfd 11 len -1
  253. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: read failed
  254. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: close_read
  255. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: input open -> drain
  256. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: ibuf empty
  257. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: send eof
  258. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: input drain -> closed
  259. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: Received SIGCHLD.
  260. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_by_pid: pid 2252
  261. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_exit_message: session 0 channel 0 pid 2252
  262. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: request exit-status confirm 0
  263. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_exit_message: release channel 0
  264. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: write failed
  265. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: close_write
  266. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: send eow
  267. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: output open -> closed
  268. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: mm_request_send entering: type 30
  269. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: send close
  270. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering
  271. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: channel 0: will not send data after close
  272. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: monitor_read: checking request 30
  273. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: notify_done: reading
  274. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_answer_pty_cleanup entering
  275. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: channel 0: will not send data after close
  276. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: session_by_tty: session 0 tty /dev/pts/1
  277. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_session_close: session 0 pid 2251
  278. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_session_close: tty /dev/pts/1 ptyfd 4
  279. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: session_pty_cleanup: session 0 release /dev/pts/1
  280. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: session_unused: session id 0 unused
  281. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: rcvd eof
  282. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: rcvd close
  283. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: channel 0: will not send data after close
  284. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: is dead
  285. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: gc: notify user
  286. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_by_channel: session 0 channel 0
  287. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_close_by_channel: channel 0 child 0
  288. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: session_close: session 0 pid 0
  289. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: session_unused: session id 0 unused
  290. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: gc: user detached
  291. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: is dead
  292. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug2: channel 0: garbage collecting
  293. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: channel 0: free: server-session, nchannels 1
  294. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: channel 0: status: The following connections are open:\r\n #0 server-session (t4 r256 i3/0 o3/0 fd -1/-1 cc -1)\r\n
  295. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: Connection closed by x.x.x.x
  296. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug1: do_cleanup
  297. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: PAM: sshpam_thread_cleanup entering
  298. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: Transferred: sent 3728, received 1768 bytes
  299. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: Closing connection to x.x.x.x port 61732
  300. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2251]: debug3: mm_request_send entering: type 50
  301. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_request_receive entering
  302. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: monitor_read: checking request 50
  303. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug3: mm_answer_term: tearing down sessions
  304. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: PAM: cleanup
  305. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: PAM: closing session
  306. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: pam_unix(sshd:session): session closed for user drwebmedia2
  307. Jan 5 12:59:16 Debian-85-jessie-64-LAMP sshd[2246]: debug1: PAM: deleting credentials
  308. Jan 5 12:59:16 Debian-85-jessie-64-LAMP systemd-logind[588]: Removed session 6.
  309. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2127]: debug3: fd 5 is not O_NONBLOCK
  310. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2127]: debug1: Forked child 2256.
  311. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: entering fd = 8 config len 724
  312. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2127]: debug3: ssh_msg_send: type 0
  313. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: oom_adjust_restore
  314. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: done
  315. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: Set /proc/self/oom_score_adj to 0
  316. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8
  317. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: inetd sockets after dupping: 3, 3
  318. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: Connection from 113.195.145.52 port 57629 on 172.31.1.100 port 22
  319. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: Client protocol version 2.0; client software version PUTTY
  320. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: no match: PUTTY
  321. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: Enabling compatibility mode for protocol 2.0
  322. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: Local version string SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3
  323. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: fd 3 setting O_NONBLOCK
  324. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: Network child is on pid 2257
  325. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: preauth child monitor started
  326. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: privsep user:group 104:65534 [preauth]
  327. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: permanently_set_uid: 104/65534 [preauth]
  328. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  329. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: SSH2_MSG_KEXINIT sent [preauth]
  330. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: SSH2_MSG_KEXINIT received [preauth]
  331. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 [preauth]
  332. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  333. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  334. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  335. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  336. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  337. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  338. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  339. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: [preauth]
  340. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: [preauth]
  341. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  342. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  343. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
  344. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: ssh-rsa,ssh-dss [preauth]
  345. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc [preauth]
  346. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc [preauth]
  347. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com [preauth]
  348. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com [preauth]
  349. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: none [preauth]
  350. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: none [preauth]
  351. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: [preauth]
  352. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: [preauth]
  353. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  354. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  355. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: mac_setup: setup hmac-sha1 [preauth]
  356. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: kex: client->server aes128-ctr hmac-sha1 none [preauth]
  357. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: mac_setup: setup hmac-sha1 [preauth]
  358. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: kex: server->client aes128-ctr hmac-sha1 none [preauth]
  359. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: bits set: 1053/2048 [preauth]
  360. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: expecting SSH2_MSG_KEXDH_INIT [preauth]
  361. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: bits set: 1018/2048 [preauth]
  362. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_key_sign entering [preauth]
  363. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 6 [preauth]
  364. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering
  365. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: monitor_read: checking request 6
  366. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_answer_sign
  367. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_answer_sign: signature 0x7f5a516c6080(271)
  368. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 7
  369. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: monitor_read: 6 used once, disabling now
  370. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]
  371. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive_expect entering: type 7 [preauth]
  372. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering [preauth]
  373. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: kex_derive_keys [preauth]
  374. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: set_newkeys: mode 1 [preauth]
  375. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: SSH2_MSG_NEWKEYS sent [preauth]
  376. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: expecting SSH2_MSG_NEWKEYS [preauth]
  377. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug2: set_newkeys: mode 0 [preauth]
  378. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: SSH2_MSG_NEWKEYS received [preauth]
  379. Jan 5 12:59:37 Debian-85-jessie-64-LAMP sshd[2256]: debug1: KEX done [preauth]
  380. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug1: userauth-request for user root service ssh-connection method none [preauth]
  381. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug1: attempt 0 failures 0 [preauth]
  382. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_getpwnamallow entering [preauth]
  383. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 8 [preauth]
  384. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
  385. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive_expect entering: type 9 [preauth]
  386. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering [preauth]
  387. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering
  388. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: monitor_read: checking request 8
  389. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_answer_pwnamallow
  390. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: Trying to reverse map address 113.195.145.52.
  391. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: reverse mapping checking getaddrinfo for 52.145.195.113.adsl-pool.jx.chinaunicom.com [113.195.145.52] failed - POSSIBLE BREAK-IN ATTEMPT!
  392. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug2: parse_server_config: config reprocess config len 724
  393. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
  394. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 9
  395. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug2: monitor_read: 8 used once, disabling now
  396. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug2: input_userauth_request: setting up authctxt for root [preauth]
  397. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_start_pam entering [preauth]
  398. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 100 [preauth]
  399. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_inform_authserv entering [preauth]
  400. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 4 [preauth]
  401. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug2: input_userauth_request: try method none [preauth]
  402. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  403. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering
  404. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: monitor_read: checking request 100
  405. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug1: PAM: initializing for "root"
  406. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug1: PAM: setting PAM_RHOST to "113.195.145.52"
  407. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug1: PAM: setting PAM_TTY to "ssh"
  408. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug2: monitor_read: 100 used once, disabling now
  409. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering
  410. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: monitor_read: checking request 4
  411. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_answer_authserv: service=ssh-connection, style=, role=
  412. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug2: monitor_read: 4 used once, disabling now
  413. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug1: userauth-request for user root service ssh-connection method password [preauth]
  414. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug1: attempt 1 failures 0 [preauth]
  415. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug2: input_userauth_request: try method password [preauth]
  416. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_auth_password entering [preauth]
  417. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 12 [preauth]
  418. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  419. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  420. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering [preauth]
  421. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering
  422. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: monitor_read: checking request 12
  423. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  424. Jan 5 12:59:38 Debian-85-jessie-64-LAMP sshd[2256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.195.145.52 user=root
  425. Jan 5 12:59:40 Debian-85-jessie-64-LAMP sshd[2256]: debug1: PAM: password authentication failed for root: Authentication failure
  426. Jan 5 12:59:40 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_answer_authpassword: sending result 0
  427. Jan 5 12:59:40 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 13
  428. Jan 5 12:59:40 Debian-85-jessie-64-LAMP sshd[2256]: Failed password for root from 113.195.145.52 port 57629 ssh2
  429. Jan 5 12:59:40 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_auth_password: user not authenticated [preauth]
  430. Jan 5 12:59:40 Debian-85-jessie-64-LAMP sshd[2256]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  431. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2256]: debug1: userauth-request for user root service ssh-connection method password [preauth]
  432. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2256]: debug1: attempt 2 failures 1 [preauth]
  433. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2256]: debug2: input_userauth_request: try method password [preauth]
  434. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_auth_password entering [preauth]
  435. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 12 [preauth]
  436. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  437. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  438. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering [preauth]
  439. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering
  440. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2256]: debug3: monitor_read: checking request 12
  441. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2256]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  442. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2127]: debug3: fd 5 is not O_NONBLOCK
  443. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2127]: debug1: Forked child 2258.
  444. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: entering fd = 9 config len 724
  445. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2127]: debug3: ssh_msg_send: type 0
  446. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: done
  447. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: oom_adjust_restore
  448. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: Set /proc/self/oom_score_adj to 0
  449. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: rexec start in 5 out 5 newsock 5 pipe 8 sock 9
  450. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: inetd sockets after dupping: 3, 3
  451. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: Connection from x.x.x.x port 58360 on 172.31.1.100 port 22
  452. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: Client protocol version 2.0; client software version PuTTY_Local:_Dec__6_2016_17:17:17
  453. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: no match: PuTTY_Local:_Dec__6_2016_17:17:17
  454. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: Enabling compatibility mode for protocol 2.0
  455. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: Local version string SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3
  456. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: fd 3 setting O_NONBLOCK
  457. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: Network child is on pid 2259
  458. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: preauth child monitor started
  459. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: privsep user:group 104:65534 [preauth]
  460. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: permanently_set_uid: 104/65534 [preauth]
  461. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  462. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: SSH2_MSG_KEXINIT sent [preauth]
  463. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: SSH2_MSG_KEXINIT received [preauth]
  464. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 [preauth]
  465. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  466. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  467. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  468. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  469. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  470. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  471. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  472. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: [preauth]
  473. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: [preauth]
  474. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  475. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  476. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,rsa2048-sha256,rsa1024-sha1,diffie-hellman-group1-sha1 [preauth]
  477. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: ssh-rsa,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-dss [preauth]
  478. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: aes256-gcm@openssh.com,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-gcm@openssh.com,aes128-ctr,aes128-cbc,chacha20-poly1305@openssh.com,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]
  479. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: aes256-gcm@openssh.com,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-gcm@openssh.com,aes128-ctr,aes128-cbc,chacha20-poly1305@openssh.com,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]
  480. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com [preauth]
  481. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com [preauth]
  482. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: none,zlib [preauth]
  483. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: none,zlib [preauth]
  484. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: [preauth]
  485. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: [preauth]
  486. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  487. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  488. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: kex: client->server aes256-gcm@openssh.com <implicit> none [preauth]
  489. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: kex: server->client aes256-gcm@openssh.com <implicit> none [preauth]
  490. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
  491. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_key_sign entering [preauth]
  492. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_send entering: type 6 [preauth]
  493. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]
  494. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive_expect entering: type 7 [preauth]
  495. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive entering [preauth]
  496. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive entering
  497. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: monitor_read: checking request 6
  498. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_answer_sign
  499. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_answer_sign: signature 0x7f399e725500(271)
  500. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_send entering: type 7
  501. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: monitor_read: 6 used once, disabling now
  502. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: kex_derive_keys [preauth]
  503. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: set_newkeys: mode 1 [preauth]
  504. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: SSH2_MSG_NEWKEYS sent [preauth]
  505. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: expecting SSH2_MSG_NEWKEYS [preauth]
  506. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: set_newkeys: mode 0 [preauth]
  507. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: SSH2_MSG_NEWKEYS received [preauth]
  508. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: KEX done [preauth]
  509. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: userauth-request for user root service ssh-connection method none [preauth]
  510. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: attempt 0 failures 0 [preauth]
  511. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_getpwnamallow entering [preauth]
  512. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_send entering: type 8 [preauth]
  513. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive entering
  514. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: monitor_read: checking request 8
  515. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_answer_pwnamallow
  516. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: Trying to reverse map address x.x.x.x.
  517. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: parse_server_config: config reprocess config len 724
  518. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
  519. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_send entering: type 9
  520. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: monitor_read: 8 used once, disabling now
  521. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
  522. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive_expect entering: type 9 [preauth]
  523. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive entering [preauth]
  524. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: input_userauth_request: setting up authctxt for root [preauth]
  525. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_start_pam entering [preauth]
  526. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_send entering: type 100 [preauth]
  527. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive entering
  528. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: monitor_read: checking request 100
  529. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: PAM: initializing for "root"
  530. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: PAM: setting PAM_RHOST to "host154-40-static.8-79-b.business.telecomitalia.it"
  531. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: PAM: setting PAM_TTY to "ssh"
  532. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: monitor_read: 100 used once, disabling now
  533. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_inform_authserv entering [preauth]
  534. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_send entering: type 4 [preauth]
  535. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: input_userauth_request: try method none [preauth]
  536. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  537. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive entering
  538. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: monitor_read: checking request 4
  539. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_answer_authserv: service=ssh-connection, style=, role=
  540. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: monitor_read: 4 used once, disabling now
  541. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: userauth-request for user root service ssh-connection method password [preauth]
  542. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: attempt 1 failures 0 [preauth]
  543. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: input_userauth_request: try method password [preauth]
  544. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_auth_password entering [preauth]
  545. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_send entering: type 12 [preauth]
  546. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  547. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  548. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive entering [preauth]
  549. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive entering
  550. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: monitor_read: checking request 12
  551. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  552. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: PAM: password authentication accepted for root
  553. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_answer_authpassword: sending result 1
  554. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_send entering: type 13
  555. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive_expect entering: type 102
  556. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive entering
  557. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: do_pam_account: called
  558. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: PAM: do_pam_account pam_acct_mgmt = 0 (Success)
  559. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_send entering: type 103
  560. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: Accepted password for root from x.x.x.x port 58360 ssh2
  561. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: monitor_child_preauth: root has been authenticated by privileged process
  562. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_get_keystate: Waiting for new keys
  563. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive_expect entering: type 26
  564. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive entering
  565. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_newkeys_from_blob: 0x7f399e727560(110)
  566. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_get_keystate: Waiting for second key
  567. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_newkeys_from_blob: 0x7f399e727560(110)
  568. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_get_keystate: Getting compression state
  569. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_get_keystate: Getting Network I/O buffers
  570. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_auth_password: user authenticated [preauth]
  571. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_do_pam_account entering [preauth]
  572. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_send entering: type 102 [preauth]
  573. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive_expect entering: type 103 [preauth]
  574. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_receive entering [preauth]
  575. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_do_pam_account returning 1 [preauth]
  576. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_send_keystate: Sending new keys: 0x7f399e7243a0 0x7f399e721d90 [preauth]
  577. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_newkeys_to_blob: converting 0x7f399e7243a0 [preauth]
  578. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_newkeys_to_blob: converting 0x7f399e721d90 [preauth]
  579. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_send_keystate: New keys have been sent [preauth]
  580. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_send_keystate: Sending compression state [preauth]
  581. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_request_send entering: type 26 [preauth]
  582. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_send_keystate: Finished sending state [preauth]
  583. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: monitor_read_log: child log fd closed
  584. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_share_sync: Share sync
  585. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: mm_share_sync: Share sync end
  586. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: PAM: establishing credentials
  587. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: PAM: opening session
  588. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: pam_unix(sshd:session): session opened for user root by (uid=0)
  589. Jan 5 12:59:41 Debian-85-jessie-64-LAMP systemd-logind[588]: New session 7 of user root.
  590. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: PAM: sshpam_store_conv called with 1 messages
  591. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: PAM: sshpam_store_conv called with 1 messages
  592. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: set_newkeys: mode 0
  593. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: set_newkeys: mode 1
  594. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: packet_set_postauth: called
  595. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: Entering interactive session for SSH2.
  596. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: fd 4 setting O_NONBLOCK
  597. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: fd 6 setting O_NONBLOCK
  598. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: server_init_dispatch_20
  599. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: Received SSH2_MSG_IGNORE
  600. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: server_input_channel_open: ctype session rchan 256 win 2147483647 max 16384
  601. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: input_session_request
  602. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: channel 0: new [server-session]
  603. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: session_new: allocate (allocated 0 max 10)
  604. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: session_unused: session id 0 unused
  605. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_new: session 0
  606. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_open: channel 0
  607. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_open: session 0: link with channel 0
  608. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: server_input_channel_open: confirm session
  609. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: server_input_channel_req: channel 0 request simple@putty.projects.tartarus.org reply 0
  610. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_by_channel: session 0 channel 0
  611. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_input_channel_req: session 0 req simple@putty.projects.tartarus.org
  612. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: server_input_channel_req: channel 0 request subsystem reply 1
  613. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_by_channel: session 0 channel 0
  614. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_input_channel_req: session 0 req subsystem
  615. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: subsystem request for sftp by user root
  616. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug1: subsystem: exec() /usr/lib/openssh/sftp-server
  617. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: Starting session: subsystem 'sftp' for root from x.x.x.x port 58360
  618. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: fd 3 setting TCP_NODELAY
  619. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug3: packet_set_tos: set IP_TOS 0x08
  620. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: fd 10 setting O_NONBLOCK
  621. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: fd 9 setting O_NONBLOCK
  622. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2258]: debug2: fd 12 setting O_NONBLOCK
  623. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2260]: debug1: SELinux support disabled
  624. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2260]: debug1: PAM: reinitializing credentials
  625. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2260]: debug1: permanently_set_uid: 0/0
  626. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2260]: debug3: Copy environment: XDG_SESSION_ID=7
  627. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2260]: debug3: Copy environment: XDG_RUNTIME_DIR=/run/user/0
  628. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2260]: debug3: Copy environment: LANG=en_US.UTF-8
  629. Jan 5 12:59:41 Debian-85-jessie-64-LAMP sshd[2260]: debug3: Copy environment: LANGUAGE=en_US:en
  630. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug1: PAM: password authentication failed for root: Authentication failure
  631. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_answer_authpassword: sending result 0
  632. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 13
  633. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: Failed password for root from 113.195.145.52 port 57629 ssh2
  634. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_auth_password: user not authenticated [preauth]
  635. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  636. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug1: userauth-request for user root service ssh-connection method password [preauth]
  637. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug1: attempt 3 failures 2 [preauth]
  638. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug2: input_userauth_request: try method password [preauth]
  639. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_auth_password entering [preauth]
  640. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 12 [preauth]
  641. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  642. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  643. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering [preauth]
  644. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering
  645. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: monitor_read: checking request 12
  646. Jan 5 12:59:43 Debian-85-jessie-64-LAMP sshd[2256]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  647. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug1: PAM: password authentication failed for root: Authentication failure
  648. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_answer_authpassword: sending result 0
  649. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_send entering: type 13
  650. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: Failed password for root from 113.195.145.52 port 57629 ssh2
  651. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_auth_password: user not authenticated [preauth]
  652. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  653. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: Received disconnect from 113.195.145.52: 11: [preauth]
  654. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug1: do_cleanup [preauth]
  655. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug3: PAM: sshpam_thread_cleanup entering [preauth]
  656. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug1: monitor_read_log: child log fd closed
  657. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug3: mm_request_receive entering
  658. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug1: do_cleanup
  659. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug1: PAM: cleanup
  660. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.195.145.52 user=root
  661. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug3: PAM: sshpam_thread_cleanup entering
  662. Jan 5 12:59:45 Debian-85-jessie-64-LAMP sshd[2256]: debug1: Killing privsep child 2257
  663. Jan 5 13:00:01 Debian-85-jessie-64-LAMP CRON[2261]: pam_unix(cron:session): session opened for user smmsp by (uid=0)
  664. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2127]: debug3: fd 5 is not O_NONBLOCK
  665. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2127]: debug1: Forked child 2280.
  666. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: entering fd = 8 config len 724
  667. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2127]: debug3: ssh_msg_send: type 0
  668. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: done
  669. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug3: oom_adjust_restore
  670. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: Set /proc/self/oom_score_adj to 0
  671. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8
  672. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug1: inetd sockets after dupping: 3, 3
  673. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: Connection from 113.195.145.52 port 41486 on 172.31.1.100 port 22
  674. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug1: Client protocol version 2.0; client software version PUTTY
  675. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug1: no match: PUTTY
  676. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug1: Enabling compatibility mode for protocol 2.0
  677. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug1: Local version string SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3
  678. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug2: fd 3 setting O_NONBLOCK
  679. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug2: Network child is on pid 2281
  680. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug3: preauth child monitor started
  681. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug3: privsep user:group 104:65534 [preauth]
  682. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug1: permanently_set_uid: 104/65534 [preauth]
  683. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  684. Jan 5 13:00:08 Debian-85-jessie-64-LAMP sshd[2280]: debug1: SSH2_MSG_KEXINIT sent [preauth]
  685. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug1: SSH2_MSG_KEXINIT received [preauth]
  686. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 [preauth]
  687. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  688. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  689. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  690. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  691. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  692. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  693. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  694. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: [preauth]
  695. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: [preauth]
  696. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  697. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  698. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
  699. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: ssh-rsa,ssh-dss [preauth]
  700. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc [preauth]
  701. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc [preauth]
  702. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com [preauth]
  703. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com [preauth]
  704. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: none [preauth]
  705. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: none [preauth]
  706. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: [preauth]
  707. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: [preauth]
  708. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  709. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  710. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: mac_setup: setup hmac-sha1 [preauth]
  711. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug1: kex: client->server aes128-ctr hmac-sha1 none [preauth]
  712. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: mac_setup: setup hmac-sha1 [preauth]
  713. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug1: kex: server->client aes128-ctr hmac-sha1 none [preauth]
  714. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: bits set: 1058/2048 [preauth]
  715. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug1: expecting SSH2_MSG_KEXDH_INIT [preauth]
  716. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: bits set: 998/2048 [preauth]
  717. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_key_sign entering [preauth]
  718. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 6 [preauth]
  719. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]
  720. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive_expect entering: type 7 [preauth]
  721. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering [preauth]
  722. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering
  723. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug3: monitor_read: checking request 6
  724. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_answer_sign
  725. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_answer_sign: signature 0x7f8f2b661ad0(271)
  726. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 7
  727. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: monitor_read: 6 used once, disabling now
  728. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: kex_derive_keys [preauth]
  729. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: set_newkeys: mode 1 [preauth]
  730. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug1: SSH2_MSG_NEWKEYS sent [preauth]
  731. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug1: expecting SSH2_MSG_NEWKEYS [preauth]
  732. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug2: set_newkeys: mode 0 [preauth]
  733. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug1: SSH2_MSG_NEWKEYS received [preauth]
  734. Jan 5 13:00:09 Debian-85-jessie-64-LAMP sshd[2280]: debug1: KEX done [preauth]
  735. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug1: userauth-request for user root service ssh-connection method none [preauth]
  736. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug1: attempt 0 failures 0 [preauth]
  737. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_getpwnamallow entering [preauth]
  738. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 8 [preauth]
  739. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
  740. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive_expect entering: type 9 [preauth]
  741. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering [preauth]
  742. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering
  743. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: monitor_read: checking request 8
  744. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_answer_pwnamallow
  745. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: Trying to reverse map address 113.195.145.52.
  746. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: reverse mapping checking getaddrinfo for 52.145.195.113.adsl-pool.jx.chinaunicom.com [113.195.145.52] failed - POSSIBLE BREAK-IN ATTEMPT!
  747. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug2: parse_server_config: config reprocess config len 724
  748. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
  749. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 9
  750. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug2: monitor_read: 8 used once, disabling now
  751. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug2: input_userauth_request: setting up authctxt for root [preauth]
  752. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_start_pam entering [preauth]
  753. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 100 [preauth]
  754. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_inform_authserv entering [preauth]
  755. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 4 [preauth]
  756. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug2: input_userauth_request: try method none [preauth]
  757. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  758. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering
  759. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: monitor_read: checking request 100
  760. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug1: PAM: initializing for "root"
  761. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug1: PAM: setting PAM_RHOST to "113.195.145.52"
  762. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug1: PAM: setting PAM_TTY to "ssh"
  763. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug2: monitor_read: 100 used once, disabling now
  764. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering
  765. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: monitor_read: checking request 4
  766. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_answer_authserv: service=ssh-connection, style=, role=
  767. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug2: monitor_read: 4 used once, disabling now
  768. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug1: userauth-request for user root service ssh-connection method password [preauth]
  769. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug1: attempt 1 failures 0 [preauth]
  770. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug2: input_userauth_request: try method password [preauth]
  771. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_auth_password entering [preauth]
  772. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 12 [preauth]
  773. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  774. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  775. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering [preauth]
  776. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering
  777. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: monitor_read: checking request 12
  778. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  779. Jan 5 13:00:10 Debian-85-jessie-64-LAMP sshd[2280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.195.145.52 user=root
  780. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug1: PAM: password authentication failed for root: Authentication failure
  781. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_answer_authpassword: sending result 0
  782. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 13
  783. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: Failed password for root from 113.195.145.52 port 41486 ssh2
  784. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_auth_password: user not authenticated [preauth]
  785. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  786. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug1: userauth-request for user root service ssh-connection method password [preauth]
  787. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug1: attempt 2 failures 1 [preauth]
  788. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug2: input_userauth_request: try method password [preauth]
  789. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_auth_password entering [preauth]
  790. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 12 [preauth]
  791. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  792. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  793. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering [preauth]
  794. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering
  795. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: monitor_read: checking request 12
  796. Jan 5 13:00:12 Debian-85-jessie-64-LAMP sshd[2280]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  797. Jan 5 13:00:15 Debian-85-jessie-64-LAMP sshd[2280]: debug1: PAM: password authentication failed for root: Authentication failure
  798. Jan 5 13:00:15 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_answer_authpassword: sending result 0
  799. Jan 5 13:00:15 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 13
  800. Jan 5 13:00:15 Debian-85-jessie-64-LAMP sshd[2280]: Failed password for root from 113.195.145.52 port 41486 ssh2
  801. Jan 5 13:00:15 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_auth_password: user not authenticated [preauth]
  802. Jan 5 13:00:15 Debian-85-jessie-64-LAMP sshd[2280]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  803. Jan 5 13:00:16 Debian-85-jessie-64-LAMP sshd[2280]: debug1: userauth-request for user root service ssh-connection method password [preauth]
  804. Jan 5 13:00:16 Debian-85-jessie-64-LAMP sshd[2280]: debug1: attempt 3 failures 2 [preauth]
  805. Jan 5 13:00:16 Debian-85-jessie-64-LAMP sshd[2280]: debug2: input_userauth_request: try method password [preauth]
  806. Jan 5 13:00:16 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_auth_password entering [preauth]
  807. Jan 5 13:00:16 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 12 [preauth]
  808. Jan 5 13:00:16 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  809. Jan 5 13:00:16 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  810. Jan 5 13:00:16 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering [preauth]
  811. Jan 5 13:00:16 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering
  812. Jan 5 13:00:16 Debian-85-jessie-64-LAMP sshd[2280]: debug3: monitor_read: checking request 12
  813. Jan 5 13:00:16 Debian-85-jessie-64-LAMP sshd[2280]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  814. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug1: PAM: password authentication failed for root: Authentication failure
  815. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_answer_authpassword: sending result 0
  816. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_send entering: type 13
  817. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: Failed password for root from 113.195.145.52 port 41486 ssh2
  818. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_auth_password: user not authenticated [preauth]
  819. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  820. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: Received disconnect from 113.195.145.52: 11: [preauth]
  821. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug1: do_cleanup [preauth]
  822. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug3: PAM: sshpam_thread_cleanup entering [preauth]
  823. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug1: monitor_read_log: child log fd closed
  824. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug3: mm_request_receive entering
  825. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug1: do_cleanup
  826. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug1: PAM: cleanup
  827. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.195.145.52 user=root
  828. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug3: PAM: sshpam_thread_cleanup entering
  829. Jan 5 13:00:18 Debian-85-jessie-64-LAMP sshd[2280]: debug1: Killing privsep child 2281
  830. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: rcvd eof
  831. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: output open -> drain
  832. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: obuf empty
  833. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: close_write
  834. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: output drain -> closed
  835. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: Received SIGCHLD.
  836. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_by_pid: pid 2260
  837. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_exit_message: session 0 channel 0 pid 2260
  838. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: request exit-status confirm 0
  839. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_exit_message: release channel 0
  840. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: read<=0 rfd 10 len 0
  841. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: read failed
  842. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: close_read
  843. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: input open -> drain
  844. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: read 0 from efd 12
  845. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: closing read-efd 12
  846. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: ibuf empty
  847. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: send eof
  848. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: input drain -> closed
  849. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: send close
  850. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: notify_done: reading
  851. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug3: channel 0: will not send data after close
  852. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: rcvd close
  853. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug3: channel 0: will not send data after close
  854. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: is dead
  855. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: gc: notify user
  856. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_by_channel: session 0 channel 0
  857. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_close_by_channel: channel 0 child 0
  858. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: session_close: session 0 pid 0
  859. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug3: session_unused: session id 0 unused
  860. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: gc: user detached
  861. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: is dead
  862. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug2: channel 0: garbage collecting
  863. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: channel 0: free: server-session, nchannels 1
  864. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug3: channel 0: status: The following connections are open:\r\n #0 server-session (t4 r256 i3/0 o3/0 fd -1/-1 cc -1)\r\n
  865. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: Connection closed by x.x.x.x
  866. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: do_cleanup
  867. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: PAM: cleanup
  868. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: PAM: closing session
  869. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: pam_unix(sshd:session): session closed for user root
  870. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug1: PAM: deleting credentials
  871. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: debug3: PAM: sshpam_thread_cleanup entering
  872. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: Transferred: sent 137080, received 9080 bytes
  873. Jan 5 13:00:42 Debian-85-jessie-64-LAMP sshd[2258]: Closing connection to x.x.x.x port 58360
  874. Jan 5 13:00:42 Debian-85-jessie-64-LAMP systemd-logind[588]: Removed session 7.
  875. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2127]: debug3: fd 5 is not O_NONBLOCK
  876. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2127]: debug1: Forked child 2283.
  877. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: entering fd = 8 config len 724
  878. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2127]: debug3: ssh_msg_send: type 0
  879. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug3: oom_adjust_restore
  880. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: done
  881. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: Set /proc/self/oom_score_adj to 0
  882. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8
  883. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: inetd sockets after dupping: 3, 3
  884. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: Connection from 113.195.145.52 port 17716 on 172.31.1.100 port 22
  885. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: Client protocol version 2.0; client software version PUTTY
  886. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: no match: PUTTY
  887. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: Enabling compatibility mode for protocol 2.0
  888. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: Local version string SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3
  889. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: fd 3 setting O_NONBLOCK
  890. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: Network child is on pid 2284
  891. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug3: preauth child monitor started
  892. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug3: privsep user:group 104:65534 [preauth]
  893. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: permanently_set_uid: 104/65534 [preauth]
  894. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  895. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: SSH2_MSG_KEXINIT sent [preauth]
  896. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: SSH2_MSG_KEXINIT received [preauth]
  897. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 [preauth]
  898. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  899. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  900. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  901. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  902. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  903. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  904. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  905. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: [preauth]
  906. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: [preauth]
  907. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  908. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  909. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
  910. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: ssh-rsa,ssh-dss [preauth]
  911. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc [preauth]
  912. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc [preauth]
  913. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com [preauth]
  914. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com [preauth]
  915. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: none [preauth]
  916. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: none [preauth]
  917. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: [preauth]
  918. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: [preauth]
  919. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  920. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  921. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: mac_setup: setup hmac-sha1 [preauth]
  922. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: kex: client->server aes128-ctr hmac-sha1 none [preauth]
  923. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: mac_setup: setup hmac-sha1 [preauth]
  924. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: kex: server->client aes128-ctr hmac-sha1 none [preauth]
  925. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug2: bits set: 1026/2048 [preauth]
  926. Jan 5 13:00:43 Debian-85-jessie-64-LAMP sshd[2283]: debug1: expecting SSH2_MSG_KEXDH_INIT [preauth]
  927. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug2: bits set: 1050/2048 [preauth]
  928. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_key_sign entering [preauth]
  929. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 6 [preauth]
  930. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]
  931. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive_expect entering: type 7 [preauth]
  932. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering [preauth]
  933. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering
  934. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug3: monitor_read: checking request 6
  935. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_answer_sign
  936. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_answer_sign: signature 0x7f4f1ee600a0(271)
  937. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 7
  938. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug2: monitor_read: 6 used once, disabling now
  939. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug2: kex_derive_keys [preauth]
  940. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug2: set_newkeys: mode 1 [preauth]
  941. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug1: SSH2_MSG_NEWKEYS sent [preauth]
  942. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug1: expecting SSH2_MSG_NEWKEYS [preauth]
  943. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug2: set_newkeys: mode 0 [preauth]
  944. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug1: SSH2_MSG_NEWKEYS received [preauth]
  945. Jan 5 13:00:44 Debian-85-jessie-64-LAMP sshd[2283]: debug1: KEX done [preauth]
  946. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug1: userauth-request for user root service ssh-connection method none [preauth]
  947. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug1: attempt 0 failures 0 [preauth]
  948. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_getpwnamallow entering [preauth]
  949. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 8 [preauth]
  950. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
  951. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive_expect entering: type 9 [preauth]
  952. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering [preauth]
  953. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering
  954. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: monitor_read: checking request 8
  955. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_answer_pwnamallow
  956. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: Trying to reverse map address 113.195.145.52.
  957. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: reverse mapping checking getaddrinfo for 52.145.195.113.adsl-pool.jx.chinaunicom.com [113.195.145.52] failed - POSSIBLE BREAK-IN ATTEMPT!
  958. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug2: parse_server_config: config reprocess config len 724
  959. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
  960. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 9
  961. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug2: monitor_read: 8 used once, disabling now
  962. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug2: input_userauth_request: setting up authctxt for root [preauth]
  963. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_start_pam entering [preauth]
  964. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 100 [preauth]
  965. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_inform_authserv entering [preauth]
  966. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 4 [preauth]
  967. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug2: input_userauth_request: try method none [preauth]
  968. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  969. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering
  970. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: monitor_read: checking request 100
  971. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug1: PAM: initializing for "root"
  972. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug1: PAM: setting PAM_RHOST to "113.195.145.52"
  973. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug1: PAM: setting PAM_TTY to "ssh"
  974. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug2: monitor_read: 100 used once, disabling now
  975. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering
  976. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: monitor_read: checking request 4
  977. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_answer_authserv: service=ssh-connection, style=, role=
  978. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug2: monitor_read: 4 used once, disabling now
  979. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug1: userauth-request for user root service ssh-connection method password [preauth]
  980. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug1: attempt 1 failures 0 [preauth]
  981. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug2: input_userauth_request: try method password [preauth]
  982. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_auth_password entering [preauth]
  983. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 12 [preauth]
  984. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  985. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  986. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering [preauth]
  987. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering
  988. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: monitor_read: checking request 12
  989. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  990. Jan 5 13:00:45 Debian-85-jessie-64-LAMP sshd[2283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.195.145.52 user=root
  991. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug1: PAM: password authentication failed for root: Authentication failure
  992. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_answer_authpassword: sending result 0
  993. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 13
  994. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: Failed password for root from 113.195.145.52 port 17716 ssh2
  995. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_auth_password: user not authenticated [preauth]
  996. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  997. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug1: userauth-request for user root service ssh-connection method password [preauth]
  998. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug1: attempt 2 failures 1 [preauth]
  999. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug2: input_userauth_request: try method password [preauth]
  1000. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_auth_password entering [preauth]
  1001. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 12 [preauth]
  1002. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  1003. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  1004. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering [preauth]
  1005. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering
  1006. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: monitor_read: checking request 12
  1007. Jan 5 13:00:47 Debian-85-jessie-64-LAMP sshd[2283]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  1008. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug1: PAM: password authentication failed for root: Authentication failure
  1009. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_answer_authpassword: sending result 0
  1010. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 13
  1011. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: Failed password for root from 113.195.145.52 port 17716 ssh2
  1012. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_auth_password: user not authenticated [preauth]
  1013. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  1014. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug1: userauth-request for user root service ssh-connection method password [preauth]
  1015. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug1: attempt 3 failures 2 [preauth]
  1016. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug2: input_userauth_request: try method password [preauth]
  1017. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_auth_password entering [preauth]
  1018. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 12 [preauth]
  1019. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  1020. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  1021. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering [preauth]
  1022. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering
  1023. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: monitor_read: checking request 12
  1024. Jan 5 13:00:50 Debian-85-jessie-64-LAMP sshd[2283]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  1025. Jan 5 13:00:51 Debian-85-jessie-64-LAMP sshd[2283]: debug1: PAM: password authentication failed for root: Authentication failure
  1026. Jan 5 13:00:51 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_answer_authpassword: sending result 0
  1027. Jan 5 13:00:51 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_send entering: type 13
  1028. Jan 5 13:00:51 Debian-85-jessie-64-LAMP sshd[2283]: Failed password for root from 113.195.145.52 port 17716 ssh2
  1029. Jan 5 13:00:51 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_auth_password: user not authenticated [preauth]
  1030. Jan 5 13:00:51 Debian-85-jessie-64-LAMP sshd[2283]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  1031. Jan 5 13:00:52 Debian-85-jessie-64-LAMP sshd[2283]: Received disconnect from 113.195.145.52: 11: [preauth]
  1032. Jan 5 13:00:52 Debian-85-jessie-64-LAMP sshd[2283]: debug1: do_cleanup [preauth]
  1033. Jan 5 13:00:52 Debian-85-jessie-64-LAMP sshd[2283]: debug3: PAM: sshpam_thread_cleanup entering [preauth]
  1034. Jan 5 13:00:52 Debian-85-jessie-64-LAMP sshd[2283]: debug1: monitor_read_log: child log fd closed
  1035. Jan 5 13:00:52 Debian-85-jessie-64-LAMP sshd[2283]: debug3: mm_request_receive entering
  1036. Jan 5 13:00:52 Debian-85-jessie-64-LAMP sshd[2283]: debug1: do_cleanup
  1037. Jan 5 13:00:52 Debian-85-jessie-64-LAMP sshd[2283]: debug1: PAM: cleanup
  1038. Jan 5 13:00:52 Debian-85-jessie-64-LAMP sshd[2283]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.195.145.52 user=root
  1039. Jan 5 13:00:52 Debian-85-jessie-64-LAMP sshd[2283]: debug3: PAM: sshpam_thread_cleanup entering
  1040. Jan 5 13:00:52 Debian-85-jessie-64-LAMP sshd[2283]: debug1: Killing privsep child 2284
  1041. Jan 5 13:01:01 Debian-85-jessie-64-LAMP CRON[2261]: pam_unix(cron:session): session closed for user smmsp
  1042. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2127]: debug3: fd 5 is not O_NONBLOCK
  1043. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2127]: debug1: Forked child 2286.
  1044. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: entering fd = 8 config len 724
  1045. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2127]: debug3: ssh_msg_send: type 0
  1046. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2127]: debug3: send_rexec_state: done
  1047. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: oom_adjust_restore
  1048. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: Set /proc/self/oom_score_adj to 0
  1049. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8
  1050. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: inetd sockets after dupping: 3, 3
  1051. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: Connection from x.x.x.x port 63465 on 172.31.1.100 port 22
  1052. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: Client protocol version 2.0; client software version PuTTY_Local:_Dec__6_2016_17:17:17
  1053. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: no match: PuTTY_Local:_Dec__6_2016_17:17:17
  1054. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: Enabling compatibility mode for protocol 2.0
  1055. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: Local version string SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3
  1056. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: fd 3 setting O_NONBLOCK
  1057. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: Network child is on pid 2287
  1058. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: preauth child monitor started
  1059. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: privsep user:group 104:65534 [preauth]
  1060. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: permanently_set_uid: 104/65534 [preauth]
  1061. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  1062. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: SSH2_MSG_KEXINIT sent [preauth]
  1063. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: SSH2_MSG_KEXINIT received [preauth]
  1064. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 [preauth]
  1065. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  1066. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  1067. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com [preauth]
  1068. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  1069. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1 [preauth]
  1070. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  1071. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: none,zlib@openssh.com [preauth]
  1072. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: [preauth]
  1073. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: [preauth]
  1074. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  1075. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  1076. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,rsa2048-sha256,rsa1024-sha1,diffie-hellman-group1-sha1 [preauth]
  1077. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: ssh-rsa,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-dss [preauth]
  1078. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: aes256-gcm@openssh.com,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-gcm@openssh.com,aes128-ctr,aes128-cbc,chacha20-poly1305@openssh.com,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]
  1079. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: aes256-gcm@openssh.com,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-ctr,aes192-cbc,aes128-gcm@openssh.com,aes128-ctr,aes128-cbc,chacha20-poly1305@openssh.com,blowfish-ctr,blowfish-cbc,3des-ctr,3des-cbc,arcfour256,arcfour128 [preauth]
  1080. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com [preauth]
  1081. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: hmac-sha2-256,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com [preauth]
  1082. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: none,zlib [preauth]
  1083. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: none,zlib [preauth]
  1084. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: [preauth]
  1085. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: [preauth]
  1086. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  1087. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_parse_kexinit: reserved 0 [preauth]
  1088. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: kex: client->server aes256-gcm@openssh.com <implicit> none [preauth]
  1089. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: kex: server->client aes256-gcm@openssh.com <implicit> none [preauth]
  1090. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
  1091. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_key_sign entering [preauth]
  1092. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_send entering: type 6 [preauth]
  1093. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive entering
  1094. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: monitor_read: checking request 6
  1095. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_answer_sign
  1096. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_answer_sign: signature 0x7f5b99c35500(271)
  1097. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_send entering: type 7
  1098. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: monitor_read: 6 used once, disabling now
  1099. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]
  1100. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive_expect entering: type 7 [preauth]
  1101. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive entering [preauth]
  1102. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: kex_derive_keys [preauth]
  1103. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: set_newkeys: mode 1 [preauth]
  1104. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: SSH2_MSG_NEWKEYS sent [preauth]
  1105. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: expecting SSH2_MSG_NEWKEYS [preauth]
  1106. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: set_newkeys: mode 0 [preauth]
  1107. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: SSH2_MSG_NEWKEYS received [preauth]
  1108. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: KEX done [preauth]
  1109. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: userauth-request for user root service ssh-connection method none [preauth]
  1110. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: attempt 0 failures 0 [preauth]
  1111. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_getpwnamallow entering [preauth]
  1112. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_send entering: type 8 [preauth]
  1113. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
  1114. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive_expect entering: type 9 [preauth]
  1115. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive entering [preauth]
  1116. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive entering
  1117. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: monitor_read: checking request 8
  1118. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_answer_pwnamallow
  1119. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: Trying to reverse map address x.x.x.x.
  1120. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: parse_server_config: config reprocess config len 724
  1121. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
  1122. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_send entering: type 9
  1123. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: monitor_read: 8 used once, disabling now
  1124. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: input_userauth_request: setting up authctxt for root [preauth]
  1125. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_start_pam entering [preauth]
  1126. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_send entering: type 100 [preauth]
  1127. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_inform_authserv entering [preauth]
  1128. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_send entering: type 4 [preauth]
  1129. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: input_userauth_request: try method none [preauth]
  1130. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  1131. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive entering
  1132. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: monitor_read: checking request 100
  1133. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: PAM: initializing for "root"
  1134. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: PAM: setting PAM_RHOST to "host154-40-static.8-79-b.business.telecomitalia.it"
  1135. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: PAM: setting PAM_TTY to "ssh"
  1136. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: monitor_read: 100 used once, disabling now
  1137. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive entering
  1138. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: monitor_read: checking request 4
  1139. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_answer_authserv: service=ssh-connection, style=, role=
  1140. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: monitor_read: 4 used once, disabling now
  1141. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: userauth-request for user root service ssh-connection method password [preauth]
  1142. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: attempt 1 failures 0 [preauth]
  1143. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: input_userauth_request: try method password [preauth]
  1144. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_auth_password entering [preauth]
  1145. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_send entering: type 12 [preauth]
  1146. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_auth_password: waiting for MONITOR_ANS_AUTHPASSWORD [preauth]
  1147. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive_expect entering: type 13 [preauth]
  1148. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive entering [preauth]
  1149. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive entering
  1150. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: monitor_read: checking request 12
  1151. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: PAM: sshpam_passwd_conv called with 1 messages
  1152. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: PAM: password authentication accepted for root
  1153. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_answer_authpassword: sending result 1
  1154. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_send entering: type 13
  1155. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive_expect entering: type 102
  1156. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive entering
  1157. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: do_pam_account: called
  1158. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: PAM: do_pam_account pam_acct_mgmt = 0 (Success)
  1159. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_send entering: type 103
  1160. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: Accepted password for root from x.x.x.x port 63465 ssh2
  1161. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: monitor_child_preauth: root has been authenticated by privileged process
  1162. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_get_keystate: Waiting for new keys
  1163. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive_expect entering: type 26
  1164. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive entering
  1165. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_newkeys_from_blob: 0x7f5b99c37560(110)
  1166. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_get_keystate: Waiting for second key
  1167. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_newkeys_from_blob: 0x7f5b99c37560(110)
  1168. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_get_keystate: Getting compression state
  1169. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_get_keystate: Getting Network I/O buffers
  1170. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_auth_password: user authenticated [preauth]
  1171. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_do_pam_account entering [preauth]
  1172. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_send entering: type 102 [preauth]
  1173. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive_expect entering: type 103 [preauth]
  1174. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_receive entering [preauth]
  1175. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_do_pam_account returning 1 [preauth]
  1176. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_send_keystate: Sending new keys: 0x7f5b99c343a0 0x7f5b99c31d90 [preauth]
  1177. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_newkeys_to_blob: converting 0x7f5b99c343a0 [preauth]
  1178. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_newkeys_to_blob: converting 0x7f5b99c31d90 [preauth]
  1179. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_send_keystate: New keys have been sent [preauth]
  1180. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_send_keystate: Sending compression state [preauth]
  1181. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_request_send entering: type 26 [preauth]
  1182. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_send_keystate: Finished sending state [preauth]
  1183. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: monitor_read_log: child log fd closed
  1184. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_share_sync: Share sync
  1185. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: mm_share_sync: Share sync end
  1186. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: PAM: establishing credentials
  1187. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: PAM: opening session
  1188. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: pam_unix(sshd:session): session opened for user root by (uid=0)
  1189. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: PAM: sshpam_store_conv called with 1 messages
  1190. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: PAM: sshpam_store_conv called with 1 messages
  1191. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: set_newkeys: mode 0
  1192. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: set_newkeys: mode 1
  1193. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: packet_set_postauth: called
  1194. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: Entering interactive session for SSH2.
  1195. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: fd 4 setting O_NONBLOCK
  1196. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: fd 6 setting O_NONBLOCK
  1197. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: server_init_dispatch_20
  1198. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: Received SSH2_MSG_IGNORE
  1199. Jan 5 13:01:08 Debian-85-jessie-64-LAMP systemd-logind[588]: New session 9 of user root.
  1200. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: server_input_channel_open: ctype session rchan 256 win 2147483647 max 16384
  1201. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: input_session_request
  1202. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: channel 0: new [server-session]
  1203. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: session_new: allocate (allocated 0 max 10)
  1204. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: session_unused: session id 0 unused
  1205. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: session_new: session 0
  1206. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: session_open: channel 0
  1207. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: session_open: session 0: link with channel 0
  1208. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: server_input_channel_open: confirm session
  1209. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: server_input_channel_req: channel 0 request simple@putty.projects.tartarus.org reply 0
  1210. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: session_by_channel: session 0 channel 0
  1211. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: session_input_channel_req: session 0 req simple@putty.projects.tartarus.org
  1212. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: server_input_channel_req: channel 0 request subsystem reply 1
  1213. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: session_by_channel: session 0 channel 0
  1214. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: session_input_channel_req: session 0 req subsystem
  1215. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: subsystem request for sftp by user root
  1216. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug1: subsystem: exec() /usr/lib/openssh/sftp-server
  1217. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: Starting session: subsystem 'sftp' for root from x.x.x.x port 63465
  1218. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: fd 3 setting TCP_NODELAY
  1219. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug3: packet_set_tos: set IP_TOS 0x08
  1220. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: fd 10 setting O_NONBLOCK
  1221. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: fd 9 setting O_NONBLOCK
  1222. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2286]: debug2: fd 12 setting O_NONBLOCK
  1223. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2288]: debug1: SELinux support disabled
  1224. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2288]: debug1: PAM: reinitializing credentials
  1225. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2288]: debug1: permanently_set_uid: 0/0
  1226. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2288]: debug3: Copy environment: XDG_SESSION_ID=9
  1227. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2288]: debug3: Copy environment: XDG_RUNTIME_DIR=/run/user/0
  1228. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2288]: debug3: Copy environment: LANG=en_US.UTF-8
  1229. Jan 5 13:01:08 Debian-85-jessie-64-LAMP sshd[2288]: debug3: Copy environment: LANGUAGE=en_US:en
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!