Apr  6 18:15:33 smaug check_reload_status[718]: Starting packages
Apr  6 18:15:35 smaug check_reload_status[718]: updating dyndns RethinkGW
Apr  6 18:15:35 smaug check_reload_status[718]: Restarting IPsec tunnels
Apr  6 18:15:35 smaug check_reload_status[718]: Restarting OpenVPN tunnels/interfaces
Apr  6 18:15:35 smaug check_reload_status[718]: Reloading filter
Apr  6 18:15:35 smaug xinetd[81725]: Starting reconfiguration
Apr  6 18:15:35 smaug xinetd[81725]: Swapping defaults
Apr  6 18:15:35 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  6 18:15:35 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  6 18:15:35 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  6 18:15:35 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  6 18:15:35 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  6 18:15:35 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  6 18:15:36 smaug xinetd[81725]: Starting reconfiguration
Apr  6 18:15:36 smaug xinetd[81725]: Swapping defaults
Apr  6 18:15:36 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  6 18:15:36 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  6 18:15:36 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  6 18:15:36 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  6 18:15:36 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  6 18:15:36 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  6 18:15:37 smaug php-fpm[45870]: NOTICE [OpenVPN] One or more OpenVPN tunnel endpoints may have changed IP addresses. Reloading endpoints that may use RethinkGW.
Apr  6 18:15:41 smaug kernel: ix2: promiscuous mode disabled
Apr  6 18:15:41 smaug kernel: ix3: promiscuous mode disabled
Apr  6 18:15:41 smaug kernel: lagg0: promiscuous mode disabled
Apr  6 18:15:41 smaug kernel: lagg0.4090: promiscuous mode disabled
Apr  6 18:15:41 smaug kernel: ix2: promiscuous mode enabled
Apr  6 18:15:41 smaug kernel: ix3: promiscuous mode enabled
Apr  6 18:15:41 smaug kernel: lagg0: promiscuous mode enabled
Apr  6 18:15:41 smaug kernel: lagg0.4090: promiscuous mode enabled
Apr  6 18:15:41 smaug ntopng[79251]: 06/Apr/2026 18:15:41 [Prefs.cpp:1491] WARNING: Missing required argument. Skipping option -W (--https-port).
Apr  6 18:15:41 smaug ntopng[79706]: 06/Apr/2026 18:15:41 [Prefs.cpp:1491] WARNING: Missing required argument. Skipping option -W (--https-port).
Apr  6 18:15:41 smaug ntopng[79706]: 06/Apr/2026 18:15:41 [Ntop.cpp:261] ERROR: Another ntopng instance is running...
Apr  6 18:15:43 smaug ntopng[79821]: 06/Apr/2026 18:15:43 [HTTPserver.cpp:1845] WARNING: The HTTP server on the default port
Apr  6 18:15:49 smaug php-fpm[91444]: NOTICE [OpenVPN] user 'nguyenm' authenticated
Apr  6 18:44:33 smaug sshd-session[52920]: Connection closed by 192.168.3.254 port 2156
Apr  6 18:44:33 smaug sshd-session[53016]: Connection closed by 192.168.3.254 port 49879
Apr  6 18:44:45 smaug sshd-session[53204]: Connection closed by 192.168.129.1 port 36009
Apr  6 18:44:45 smaug sshd-session[53497]: Connection closed by 192.168.129.1 port 42029
Apr  6 18:45:18 smaug sshd-session[99831]: Connection closed by 192.168.2.254 port 62184
Apr  6 18:45:18 smaug sshd-session[24]: Connection closed by 192.168.2.254 port 51096
Apr  6 18:45:27 smaug sshd-session[40]: Connection closed by 193.97.129.89 port 54357
Apr  6 18:45:27 smaug sshd-session[195]: Connection closed by 193.97.129.89 port 16612
Apr  6 18:45:38 smaug sshd-session[276]: Connection closed by 192.168.1.200 port 65410
Apr  6 18:45:38 smaug sshd-session[452]: Connection closed by 192.168.1.200 port 3359
Apr  6 18:46:06 smaug sshd-session[43011]: Connection closed by 192.168.254.250 port 15585
Apr  6 18:46:06 smaug sshd-session[43105]: Connection closed by 192.168.254.250 port 19779
Apr  6 19:44:38 smaug sshd-session[32123]: Connection closed by 192.168.129.1 port 27699
Apr  6 19:44:38 smaug sshd-session[32460]: Connection closed by 192.168.129.1 port 38641
Apr  6 19:45:25 smaug sshd-session[77630]: Connection closed by 192.168.1.200 port 39262
Apr  6 19:45:25 smaug sshd-session[77859]: Connection closed by 192.168.1.200 port 16794
Apr  6 19:45:55 smaug sshd-session[78481]: Connection closed by 192.168.254.250 port 45440
Apr  6 19:45:55 smaug sshd-session[78784]: Connection closed by 192.168.254.250 port 37952
Apr  6 19:46:03 smaug sshd-session[79534]: Connection closed by 192.168.2.254 port 34239
Apr  6 19:46:03 smaug sshd-session[79815]: Connection closed by 192.168.2.254 port 41150
Apr  6 19:46:12 smaug sshd-session[80352]: Connection closed by 193.97.129.89 port 49954
Apr  6 19:46:12 smaug sshd-session[80515]: Connection closed by 193.97.129.89 port 38905
Apr  6 19:46:21 smaug sshd-session[80819]: Connection closed by 192.168.3.254 port 35166
Apr  6 19:46:21 smaug sshd-session[81142]: Connection closed by 192.168.3.254 port 9432
Apr  6 19:47:14 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'zimmer' authenticated
Apr  6 20:16:17 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'finkenze' authenticated
Apr  6 20:44:21 smaug php[45121]: NOTICE [Snort] Snort Subscriber rules are up to date...
Apr  6 20:44:22 smaug php[45121]: NOTICE [Snort] Snort GPLv2 Community Rules are up to date...
Apr  6 20:44:22 smaug php[45121]: NOTICE [Snort] Emerging Threats Open rules are up to date...
Apr  6 20:44:22 smaug php[45121]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules file update downloaded successfully.
Apr  6 20:44:22 smaug php[45121]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules are up to date...
Apr  6 20:44:22 smaug php[45121]: NOTICE [Snort] The Rules update has finished.
Apr  6 20:44:39 smaug sshd-session[56802]: Connection closed by 192.168.129.1 port 25434
Apr  6 20:44:39 smaug sshd-session[56810]: Connection closed by 192.168.129.1 port 6116
Apr  6 20:45:20 smaug sshd-session[1075]: Connection closed by 192.168.3.254 port 9110
Apr  6 20:45:20 smaug sshd-session[1142]: Connection closed by 192.168.3.254 port 37822
Apr  6 20:45:29 smaug sshd-session[1389]: Connection closed by 193.97.129.89 port 53208
Apr  6 20:45:29 smaug sshd-session[1725]: Connection closed by 193.97.129.89 port 38288
Apr  6 20:45:38 smaug sshd-session[1784]: Connection closed by 192.168.2.254 port 4396
Apr  6 20:45:38 smaug sshd-session[1862]: Connection closed by 192.168.2.254 port 9846
Apr  6 20:46:06 smaug sshd-session[43520]: Connection closed by 192.168.254.250 port 8569
Apr  6 20:46:06 smaug sshd-session[43844]: Connection closed by 192.168.254.250 port 26893
Apr  6 20:46:15 smaug sshd-session[43847]: Connection closed by 192.168.1.200 port 12353
Apr  6 20:46:15 smaug sshd-session[44161]: Connection closed by 192.168.1.200 port 63692
Apr  6 21:45:26 smaug sshd-session[57326]: Connection closed by 192.168.129.1 port 44891
Apr  6 21:45:26 smaug sshd-session[57499]: Connection closed by 192.168.129.1 port 46081
Apr  6 21:46:10 smaug sshd-session[58803]: Connection closed by 192.168.2.254 port 18553
Apr  6 21:46:10 smaug sshd-session[58945]: Connection closed by 192.168.2.254 port 42958
Apr  6 21:46:18 smaug sshd-session[59173]: Connection closed by 193.97.129.89 port 20558
Apr  6 21:46:18 smaug sshd-session[59416]: Connection closed by 193.97.129.89 port 18884
Apr  6 21:46:28 smaug sshd-session[98498]: Connection closed by 192.168.1.200 port 52517
Apr  6 21:46:28 smaug sshd-session[98801]: Connection closed by 192.168.1.200 port 57919
Apr  6 21:46:55 smaug sshd-session[99331]: Connection closed by 192.168.254.250 port 6774
Apr  6 21:46:55 smaug sshd-session[99493]: Connection closed by 192.168.254.250 port 12509
Apr  6 21:47:04 smaug sshd-session[99748]: Connection closed by 192.168.3.254 port 21098
Apr  6 21:47:04 smaug sshd-session[99876]: Connection closed by 192.168.3.254 port 1751
Apr  6 22:23:48 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'rennerd' authenticated
Apr  6 22:46:17 smaug sshd-session[40353]: Connection closed by 192.168.129.1 port 13717
Apr  6 22:46:17 smaug sshd-session[40462]: Connection closed by 192.168.129.1 port 64041
Apr  6 22:47:00 smaug sshd-session[84355]: Connection closed by 192.168.1.200 port 45296
Apr  6 22:47:01 smaug sshd-session[84398]: Connection closed by 192.168.1.200 port 43313
Apr  6 22:47:18 smaug sshd-session[85011]: Connection closed by 192.168.2.254 port 51780
Apr  6 22:47:18 smaug sshd-session[85246]: Connection closed by 192.168.2.254 port 28508
Apr  6 22:47:46 smaug sshd-session[85349]: Connection closed by 192.168.254.250 port 6642
Apr  6 22:47:46 smaug sshd-session[85398]: Connection closed by 192.168.254.250 port 62001
Apr  6 22:47:55 smaug sshd-session[85608]: Connection closed by 192.168.3.254 port 21314
Apr  6 22:47:55 smaug sshd-session[85933]: Connection closed by 192.168.3.254 port 5423
Apr  6 22:48:03 smaug sshd-session[30005]: Connection closed by 193.97.129.89 port 45382
Apr  6 22:48:03 smaug sshd-session[30154]: Connection closed by 193.97.129.89 port 48426
Apr  6 22:59:47 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'nowak' authenticated
Apr  6 23:46:17 smaug sshd-session[42109]: Connection closed by 192.168.129.1 port 28911
Apr  6 23:46:17 smaug sshd-session[42264]: Connection closed by 192.168.129.1 port 30341
Apr  6 23:46:57 smaug sshd-session[91125]: Connection closed by 193.97.129.89 port 27115
Apr  6 23:46:57 smaug sshd-session[91384]: Connection closed by 193.97.129.89 port 64405
Apr  6 23:47:06 smaug sshd-session[91862]: Connection closed by 192.168.3.254 port 14147
Apr  6 23:47:06 smaug sshd-session[91954]: Connection closed by 192.168.3.254 port 34042
Apr  6 23:47:34 smaug sshd-session[33615]: Connection closed by 192.168.254.250 port 51870
Apr  6 23:47:34 smaug sshd-session[33892]: Connection closed by 192.168.254.250 port 61243
Apr  6 23:47:43 smaug sshd-session[34035]: Connection closed by 192.168.2.254 port 55505
Apr  6 23:47:43 smaug sshd-session[34306]: Connection closed by 192.168.2.254 port 50273
Apr  6 23:48:00 smaug sshd-session[35094]: Connection closed by 192.168.1.200 port 34931
Apr  6 23:48:00 smaug sshd-session[35169]: Connection closed by 192.168.1.200 port 15155
Apr  7 00:46:46 smaug sshd-session[93870]: Connection closed by 192.168.129.1 port 30921
Apr  7 00:46:46 smaug sshd-session[93903]: Connection closed by 192.168.129.1 port 42062
Apr  7 00:47:25 smaug sshd-session[46633]: Connection closed by 192.168.3.254 port 56863
Apr  7 00:47:25 smaug sshd-session[46883]: Connection closed by 192.168.3.254 port 55507
Apr  7 00:47:34 smaug sshd-session[46952]: Connection closed by 193.97.129.12 port 28008
Apr  7 00:47:34 smaug sshd-session[47176]: Connection closed by 193.97.129.12 port 9771
Apr  7 00:47:43 smaug sshd-session[47843]: Connection closed by 192.168.2.254 port 15075
Apr  7 00:47:43 smaug sshd-session[47937]: Connection closed by 192.168.2.254 port 45709
Apr  7 00:48:10 smaug sshd-session[93120]: Connection closed by 192.168.254.250 port 63454
Apr  7 00:48:10 smaug sshd-session[93305]: Connection closed by 192.168.254.250 port 33878
Apr  7 00:48:25 smaug sshd-session[93632]: Connection closed by 192.168.1.200 port 45673
Apr  7 00:48:25 smaug sshd-session[93891]: Connection closed by 192.168.1.200 port 33276
Apr  7 01:41:49 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'athoti' authenticated
Apr  7 01:48:04 smaug sshd-session[10209]: Connection closed by 192.168.254.250 port 10780
Apr  7 01:48:05 smaug sshd-session[10344]: Connection closed by 192.168.254.250 port 60008
Apr  7 01:48:20 smaug sshd-session[10576]: Connection closed by 192.168.1.200 port 61460
Apr  7 01:48:20 smaug sshd-session[10676]: Connection closed by 192.168.1.200 port 41729
Apr  7 01:48:28 smaug sshd-session[10725]: Connection closed by 193.97.129.89 port 37455
Apr  7 01:48:28 smaug sshd-session[10837]: Connection closed by 193.97.129.89 port 26593
Apr  7 01:48:37 smaug sshd-session[11069]: Connection closed by 192.168.2.254 port 42043
Apr  7 01:48:37 smaug sshd-session[11172]: Connection closed by 192.168.2.254 port 52522
Apr  7 01:48:49 smaug sshd-session[53377]: Connection closed by 192.168.129.1 port 54973
Apr  7 01:48:49 smaug sshd-session[53644]: Connection closed by 192.168.129.1 port 22982
Apr  7 01:49:32 smaug sshd-session[54782]: Connection closed by 192.168.3.254 port 61368
Apr  7 01:49:32 smaug sshd-session[55098]: Connection closed by 192.168.3.254 port 50411
Apr  7 02:44:16 smaug php[28054]: NOTICE [Snort] Snort Subscriber rules are up to date...
Apr  7 02:44:17 smaug php[28054]: NOTICE [Snort] Snort GPLv2 Community Rules are up to date...
Apr  7 02:44:17 smaug php[28054]: NOTICE [Snort] There is a new set of Emerging Threats Open rules posted. Downloading emerging.rules.tar.gz...
Apr  7 02:44:19 smaug php[28054]: NOTICE [Snort] Emerging Threats Open rules file update downloaded successfully
Apr  7 02:44:19 smaug php[28054]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules file update downloaded successfully.
Apr  7 02:44:19 smaug php[28054]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules are up to date...
Apr  7 02:44:19 smaug php[28054]: NOTICE [Snort] Updating rules configuration for: LAN ...
Apr  7 02:44:22 smaug php[28054]: NOTICE [Snort] Enabling any flowbit-required rules for: LAN...
Apr  7 02:44:22 smaug php[28054]: NOTICE [Snort] Building new sid-msg.map file for LAN...
Apr  7 02:44:23 smaug php[28054]: NOTICE [Snort] Updating rules configuration for: WAN ...
Apr  7 02:44:25 smaug php[28054]: NOTICE [Snort] Enabling any flowbit-required rules for: WAN...
Apr  7 02:44:25 smaug php[28054]: NOTICE [Snort] Building new sid-msg.map file for WAN...
Apr  7 02:44:26 smaug php[28054]: NOTICE [Snort] Updating rules configuration for: SFIDMZ ...
Apr  7 02:44:28 smaug php[28054]: NOTICE [Snort] Enabling any flowbit-required rules for: SFIDMZ...
Apr  7 02:44:29 smaug php[28054]: NOTICE [Snort] Building new sid-msg.map file for SFIDMZ...
Apr  7 02:44:29 smaug php[28054]: NOTICE [Snort] Updating rules configuration for: SFITMGMNT ...
Apr  7 02:44:32 smaug php[28054]: NOTICE [Snort] Enabling any flowbit-required rules for: SFITMGMNT...
Apr  7 02:44:32 smaug php[28054]: NOTICE [Snort] Building new sid-msg.map file for SFITMGMNT...
Apr  7 02:44:33 smaug php[28054]: NOTICE [Snort] The Rules update has finished.
Apr  7 02:48:37 smaug sshd-session[54267]: Connection closed by 192.168.129.1 port 32591
Apr  7 02:48:37 smaug sshd-session[54597]: Connection closed by 192.168.129.1 port 18657
Apr  7 02:49:18 smaug sshd-session[65109]: Connection closed by 192.168.3.254 port 11765
Apr  7 02:49:18 smaug sshd-session[65362]: Connection closed by 192.168.3.254 port 35893
Apr  7 02:49:39 smaug sshd-session[8048]: Connection closed by 192.168.1.200 port 15973
Apr  7 02:49:39 smaug sshd-session[8155]: Connection closed by 192.168.1.200 port 7183
Apr  7 02:50:05 smaug sshd-session[10813]: Connection closed by 192.168.254.250 port 41791
Apr  7 02:50:05 smaug sshd-session[10880]: Connection closed by 192.168.254.250 port 20782
Apr  7 02:50:14 smaug sshd-session[11001]: Connection closed by 192.168.2.254 port 46349
Apr  7 02:50:14 smaug sshd-session[11307]: Connection closed by 192.168.2.254 port 10919
Apr  7 02:50:22 smaug sshd-session[26924]: Connection closed by 193.97.129.89 port 57128
Apr  7 02:50:22 smaug sshd-session[27052]: Connection closed by 193.97.129.89 port 6982
Apr  7 03:49:14 smaug sshd-session[13097]: Connection closed by 193.97.129.89 port 44066
Apr  7 03:49:15 smaug sshd-session[13439]: Connection closed by 193.97.129.89 port 12815
Apr  7 03:49:23 smaug sshd-session[13559]: Connection closed by 192.168.2.254 port 3473
Apr  7 03:49:23 smaug sshd-session[13589]: Connection closed by 192.168.2.254 port 4852
Apr  7 03:49:35 smaug sshd-session[21422]: Connection closed by 192.168.129.1 port 51780
Apr  7 03:49:35 smaug sshd-session[21483]: Connection closed by 192.168.129.1 port 37472
Apr  7 03:50:23 smaug sshd-session[69179]: Connection closed by 192.168.3.254 port 36292
Apr  7 03:50:23 smaug sshd-session[69430]: Connection closed by 192.168.3.254 port 57894
Apr  7 03:50:52 smaug sshd-session[69565]: Connection closed by 192.168.254.250 port 48596
Apr  7 03:50:52 smaug sshd-session[69662]: Connection closed by 192.168.254.250 port 20321
Apr  7 03:51:07 smaug sshd-session[13459]: Connection closed by 192.168.1.200 port 64406
Apr  7 03:51:07 smaug sshd-session[13692]: Connection closed by 192.168.1.200 port 58346
Apr  7 04:20:07 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'athoti' authenticated
Apr  7 04:49:15 smaug sshd-session[42046]: Connection closed by 193.97.129.89 port 58326
Apr  7 04:49:15 smaug sshd-session[42063]: Connection closed by 193.97.129.89 port 6297
Apr  7 04:49:24 smaug sshd-session[42855]: Connection closed by 192.168.2.254 port 15669
Apr  7 04:49:24 smaug sshd-session[42887]: Connection closed by 192.168.2.254 port 60001
Apr  7 04:49:50 smaug sshd-session[84938]: Connection closed by 192.168.254.250 port 21936
Apr  7 04:49:50 smaug sshd-session[85245]: Connection closed by 192.168.254.250 port 52684
Apr  7 04:50:05 smaug sshd-session[87868]: Connection closed by 192.168.1.200 port 17857
Apr  7 04:50:05 smaug sshd-session[87906]: Connection closed by 192.168.1.200 port 62410
Apr  7 04:50:26 smaug sshd-session[97275]: Connection closed by 192.168.129.1 port 40353
Apr  7 04:50:26 smaug sshd-session[97487]: Connection closed by 192.168.129.1 port 48867
Apr  7 04:51:03 smaug sshd-session[38066]: Connection closed by 192.168.3.254 port 44790
Apr  7 04:51:03 smaug sshd-session[38154]: Connection closed by 192.168.3.254 port 9810
Apr  7 05:10:05 smaug sshd-session[73891]: Accepted publickey for root from 192.168.160.1 port 44559 ssh2: ED25519 SHA256:lhx8qhHzS6pElUDrQjRU0nd2Nr539mrE9OhXE0imD4s
Apr  7 05:10:05 smaug sshd-session[74166]: Received disconnect from 192.168.160.1 port 44559:11: disconnected by user
Apr  7 05:10:05 smaug sshd-session[74166]: Disconnected from user root 192.168.160.1 port 44559
Apr  7 05:49:33 smaug sshd-session[9652]: Connection closed by 192.168.129.1 port 51185
Apr  7 05:49:33 smaug sshd-session[9743]: Connection closed by 192.168.129.1 port 56051
Apr  7 05:50:16 smaug sshd-session[52181]: Connection closed by 193.97.129.89 port 60005
Apr  7 05:50:16 smaug sshd-session[52442]: Connection closed by 193.97.129.89 port 50631
Apr  7 05:50:25 smaug sshd-session[52688]: Connection closed by 192.168.3.254 port 60933
Apr  7 05:50:25 smaug sshd-session[52736]: Connection closed by 192.168.3.254 port 16964
Apr  7 05:50:54 smaug sshd-session[52846]: Connection closed by 192.168.254.250 port 18184
Apr  7 05:50:54 smaug sshd-session[53174]: Connection closed by 192.168.254.250 port 51972
Apr  7 05:51:03 smaug sshd-session[54024]: Connection closed by 192.168.2.254 port 36474
Apr  7 05:51:03 smaug sshd-session[54048]: Connection closed by 192.168.2.254 port 56707
Apr  7 05:51:27 smaug sshd-session[5879]: Connection closed by 192.168.1.200 port 47167
Apr  7 05:51:27 smaug sshd-session[5932]: Connection closed by 192.168.1.200 port 49203
Apr  7 05:52:33 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'nguyenm' authenticated
Apr  7 06:44:26 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'bullinger' authenticated
Apr  7 06:49:53 smaug sshd-session[89294]: Connection closed by 192.168.129.1 port 16969
Apr  7 06:49:54 smaug sshd-session[89475]: Connection closed by 192.168.129.1 port 28497
Apr  7 06:50:40 smaug sshd-session[19105]: Connection closed by 192.168.1.200 port 61355
Apr  7 06:50:40 smaug sshd-session[19117]: Connection closed by 192.168.1.200 port 16698
Apr  7 06:50:57 smaug sshd-session[34988]: Connection closed by 192.168.2.254 port 46533
Apr  7 06:50:57 smaug sshd-session[35140]: Connection closed by 192.168.2.254 port 61999
Apr  7 06:51:26 smaug sshd-session[35602]: Connection closed by 192.168.254.250 port 45565
Apr  7 06:51:26 smaug sshd-session[35821]: Connection closed by 192.168.254.250 port 9918
Apr  7 06:51:35 smaug sshd-session[36122]: Connection closed by 192.168.3.254 port 34058
Apr  7 06:51:35 smaug sshd-session[36263]: Connection closed by 192.168.3.254 port 35074
Apr  7 06:51:44 smaug sshd-session[78299]: Connection closed by 193.97.129.89 port 36756
Apr  7 06:51:44 smaug sshd-session[78363]: Connection closed by 193.97.129.89 port 60402
Apr  7 07:06:25 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'mishra' authenticated
Apr  7 07:28:52 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'finkenze' authenticated
Apr  7 07:46:54 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'gropp' authenticated
Apr  7 07:50:31 smaug sshd-session[82354]: Connection closed by 192.168.129.1 port 15424
Apr  7 07:50:32 smaug sshd-session[82518]: Connection closed by 192.168.129.1 port 7656
Apr  7 07:51:11 smaug sshd-session[83062]: Connection closed by 192.168.2.254 port 58081
Apr  7 07:51:11 smaug sshd-session[83177]: Connection closed by 192.168.2.254 port 21717
Apr  7 07:51:19 smaug sshd-session[22293]: Connection closed by 193.97.129.89 port 28228
Apr  7 07:51:20 smaug sshd-session[22419]: Connection closed by 193.97.129.89 port 45559
Apr  7 07:51:32 smaug sshd-session[22852]: Connection closed by 192.168.1.200 port 13888
Apr  7 07:51:32 smaug sshd-session[22965]: Connection closed by 192.168.1.200 port 17410
Apr  7 07:52:00 smaug sshd-session[23138]: Connection closed by 192.168.254.250 port 32546
Apr  7 07:52:00 smaug sshd-session[24264]: Connection closed by 192.168.254.250 port 63742
Apr  7 07:52:09 smaug sshd-session[24500]: Connection closed by 192.168.3.254 port 19970
Apr  7 07:52:09 smaug sshd-session[24508]: Connection closed by 192.168.3.254 port 42678
Apr  7 08:05:28 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'rudolph' authenticated
Apr  7 08:24:07 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'saxena' authenticated
Apr  7 08:43:38 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'krasenbrink' authenticated
Apr  7 08:44:36 smaug php[42023]: NOTICE [Snort] Snort Subscriber rules are up to date...
Apr  7 08:44:36 smaug php[42023]: NOTICE [Snort] Snort GPLv2 Community Rules are up to date...
Apr  7 08:44:36 smaug php[42023]: NOTICE [Snort] Emerging Threats Open rules are up to date...
Apr  7 08:44:36 smaug php[42023]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules file update downloaded successfully.
Apr  7 08:44:36 smaug php[42023]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules are up to date...
Apr  7 08:44:36 smaug php[42023]: NOTICE [Snort] The Rules update has finished.
Apr  7 08:45:38 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'branz' authenticated
Apr  7 08:50:07 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'dogan' authenticated
Apr  7 08:51:17 smaug sshd-session[81300]: Connection closed by 192.168.129.1 port 57901
Apr  7 08:51:17 smaug sshd-session[81638]: Connection closed by 192.168.129.1 port 57678
Apr  7 08:52:29 smaug sshd-session[25507]: Connection closed by 192.168.3.254 port 18685
Apr  7 08:52:29 smaug sshd-session[25701]: Connection closed by 192.168.3.254 port 35814
Apr  7 08:52:57 smaug sshd-session[25738]: Connection closed by 192.168.254.250 port 49831
Apr  7 08:52:57 smaug sshd-session[26005]: Connection closed by 192.168.254.250 port 5461
Apr  7 08:53:09 smaug sshd-session[66900]: Connection closed by 192.168.1.200 port 17488
Apr  7 08:53:09 smaug sshd-session[67222]: Connection closed by 192.168.1.200 port 19943
Apr  7 08:53:21 smaug sshd-session[67283]: Connection closed by 193.97.129.89 port 6619
Apr  7 08:53:21 smaug sshd-session[67291]: Connection closed by 193.97.129.89 port 30336
Apr  7 08:53:30 smaug sshd-session[75745]: Connection closed by 192.168.2.254 port 40314
Apr  7 08:53:30 smaug sshd-session[75752]: Connection closed by 192.168.2.254 port 59515
Apr  7 08:57:45 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  7 09:00:52 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'Babl' authenticated
Apr  7 09:24:53 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'haellmay' authenticated
Apr  7 09:25:17 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'mishra' authenticated
Apr  7 09:33:17 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'sonnleitner' authenticated
Apr  7 09:47:51 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'gropp' authenticated
Apr  7 09:51:43 smaug sshd-session[67206]: Connection closed by 192.168.129.1 port 57793
Apr  7 09:51:43 smaug sshd-session[67542]: Connection closed by 192.168.129.1 port 36385
Apr  7 09:52:51 smaug sshd-session[12455]: Connection closed by 192.168.1.200 port 5208
Apr  7 09:52:51 smaug sshd-session[12456]: Connection closed by 192.168.1.200 port 14720
Apr  7 09:53:11 smaug sshd-session[13213]: Connection closed by 192.168.2.254 port 11658
Apr  7 09:53:11 smaug sshd-session[13479]: Connection closed by 192.168.2.254 port 29624
Apr  7 09:53:38 smaug sshd-session[57198]: Connection closed by 192.168.254.250 port 21875
Apr  7 09:53:38 smaug sshd-session[57256]: Connection closed by 192.168.254.250 port 36954
Apr  7 09:53:47 smaug sshd-session[57980]: Connection closed by 192.168.3.254 port 9391
Apr  7 09:53:47 smaug sshd-session[57989]: Connection closed by 192.168.3.254 port 8894
Apr  7 09:53:56 smaug sshd-session[58075]: Connection closed by 193.97.129.89 port 48305
Apr  7 09:53:56 smaug sshd-session[58237]: Connection closed by 193.97.129.89 port 27357
Apr  7 10:32:12 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'jemia' authenticated
Apr  7 10:33:18 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'haellmay' authenticated
Apr  7 10:52:57 smaug sshd-session[50297]: Connection closed by 192.168.1.200 port 14872
Apr  7 10:52:57 smaug sshd-session[50430]: Connection closed by 192.168.1.200 port 61493
Apr  7 10:53:27 smaug sshd-session[90736]: Connection closed by 192.168.254.250 port 59211
Apr  7 10:53:27 smaug sshd-session[90993]: Connection closed by 192.168.254.250 port 43377
Apr  7 10:53:36 smaug sshd-session[91317]: Connection closed by 192.168.2.254 port 56770
Apr  7 10:53:36 smaug sshd-session[91406]: Connection closed by 192.168.2.254 port 20546
Apr  7 10:53:45 smaug sshd-session[91598]: Connection closed by 193.97.129.89 port 15133
Apr  7 10:53:45 smaug sshd-session[91629]: Connection closed by 193.97.129.89 port 37543
Apr  7 10:53:56 smaug sshd-session[91645]: Connection closed by 192.168.129.1 port 32719
Apr  7 10:53:56 smaug sshd-session[91663]: Connection closed by 192.168.129.1 port 18209
Apr  7 10:54:45 smaug sshd-session[33847]: Connection closed by 192.168.3.254 port 51048
Apr  7 10:54:45 smaug sshd-session[34089]: Connection closed by 192.168.3.254 port 28451
Apr  7 11:00:10 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'dogan' authenticated
Apr  7 11:10:42 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'gropp' authenticated
Apr  7 11:33:29 smaug php-fpm[65672]: WARNING [OpenVPN] user 'bader' could not authenticate.
Apr  7 11:36:34 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  7 11:49:52 smaug php-fpm[65672]: /index.php: Successful login for user 'admin' from: 192.168.130.109 (Local Database)
Apr  7 11:51:10 smaug php-fpm[70818]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  7 11:51:10 smaug check_reload_status[718]: Syncing firewall
Apr  7 11:51:44 smaug php-fpm[73912]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  7 11:51:45 smaug check_reload_status[718]: Syncing firewall
Apr  7 11:51:47 smaug check_reload_status[718]: Reloading filter
Apr  7 11:51:48 smaug xinetd[81725]: Starting reconfiguration
Apr  7 11:51:48 smaug xinetd[81725]: Swapping defaults
Apr  7 11:51:48 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  7 11:51:48 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  7 11:51:48 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  7 11:51:48 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  7 11:51:48 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  7 11:51:48 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  7 11:52:49 smaug sshd-session[56787]: Connection closed by 192.168.2.254 port 47820
Apr  7 11:52:49 smaug sshd-session[56931]: Connection closed by 192.168.2.254 port 34350
Apr  7 11:52:58 smaug sshd-session[56975]: Connection closed by 193.97.129.89 port 61313
Apr  7 11:52:58 smaug sshd-session[57025]: Connection closed by 193.97.129.89 port 23286
Apr  7 11:53:10 smaug sshd-session[2108]: Connection closed by 192.168.1.200 port 25517
Apr  7 11:53:10 smaug sshd-session[2186]: Connection closed by 192.168.1.200 port 49252
Apr  7 11:53:42 smaug sshd-session[5807]: Connection closed by 192.168.254.250 port 59548
Apr  7 11:53:42 smaug sshd-session[6079]: Connection closed by 192.168.254.250 port 23151
Apr  7 11:53:59 smaug sshd-session[6246]: Connection closed by 192.168.3.254 port 35455
Apr  7 11:53:59 smaug sshd-session[6448]: Connection closed by 192.168.3.254 port 35298
Apr  7 11:54:11 smaug sshd-session[48827]: Connection closed by 192.168.129.1 port 43121
Apr  7 11:54:11 smaug sshd-session[48948]: Connection closed by 192.168.129.1 port 64551
Apr  7 12:07:37 smaug php-fpm[49638]: NOTICE [OpenVPN] user 'branz' authenticated
Apr  7 12:11:25 smaug nginx: 2026/04/07 12:11:25 [crit] 11373#100993: *831 SSL_write() failed (SSL: error:8000000D:system library::Permission denied:tls_retry_write_records failure) (13: Permission denied) while processing HTTP/2 connection, client: 192.168.201.11, server: 0.0.0.0:443
Apr  7 12:11:25 smaug nginx: 2026/04/07 12:11:25 [crit] 11627#100939: *828 SSL_write() failed (SSL: error:8000000D:system library::Permission denied:tls_retry_write_records failure) (13: Permission denied) while processing HTTP/2 connection, client: 192.168.201.11, server: 0.0.0.0:443
Apr  7 12:20:49 smaug php-fpm[49638]: NOTICE [OpenVPN] user 'gropp' authenticated
Apr  7 12:23:28 smaug php-fpm[49638]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Saved/edited a virtual IP.
Apr  7 12:23:28 smaug check_reload_status[718]: Syncing firewall
Apr  7 12:23:32 smaug check_reload_status[718]: Reloading filter
Apr  7 12:23:33 smaug xinetd[81725]: Starting reconfiguration
Apr  7 12:23:33 smaug xinetd[81725]: Swapping defaults
Apr  7 12:23:33 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  7 12:23:33 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  7 12:23:33 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  7 12:23:33 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  7 12:23:33 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  7 12:23:33 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  7 12:23:59 smaug php-fpm[70818]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  7 12:29:43 smaug php-fpm[45870]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Saved/edited a virtual IP.
Apr  7 12:29:43 smaug check_reload_status[718]: Syncing firewall
Apr  7 12:29:59 smaug php-fpm[49638]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Saved/edited a virtual IP.
Apr  7 12:29:59 smaug check_reload_status[718]: Syncing firewall
Apr  7 12:30:06 smaug check_reload_status[718]: Reloading filter
Apr  7 12:30:07 smaug xinetd[81725]: Starting reconfiguration
Apr  7 12:30:07 smaug xinetd[81725]: Swapping defaults
Apr  7 12:30:07 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  7 12:30:07 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  7 12:30:07 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  7 12:30:07 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  7 12:30:07 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  7 12:30:07 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  7 12:30:43 smaug php-fpm[91444]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  7 12:30:43 smaug check_reload_status[718]: Syncing firewall
Apr  7 12:30:46 smaug check_reload_status[718]: Reloading filter
Apr  7 12:30:47 smaug xinetd[81725]: Starting reconfiguration
Apr  7 12:30:47 smaug xinetd[81725]: Swapping defaults
Apr  7 12:30:47 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  7 12:30:47 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  7 12:30:47 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  7 12:30:47 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  7 12:30:47 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  7 12:30:47 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  7 12:30:57 smaug php-fpm[65672]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  7 12:30:57 smaug check_reload_status[718]: Syncing firewall
Apr  7 12:31:01 smaug check_reload_status[718]: Reloading filter
Apr  7 12:31:03 smaug xinetd[81725]: Starting reconfiguration
Apr  7 12:31:03 smaug xinetd[81725]: Swapping defaults
Apr  7 12:31:03 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  7 12:31:03 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  7 12:31:03 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  7 12:31:03 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  7 12:31:03 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  7 12:31:03 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  7 12:31:22 smaug php-fpm[49638]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  7 12:31:23 smaug check_reload_status[718]: Syncing firewall
Apr  7 12:31:25 smaug check_reload_status[718]: Reloading filter
Apr  7 12:31:27 smaug xinetd[81725]: Starting reconfiguration
Apr  7 12:31:27 smaug xinetd[81725]: Swapping defaults
Apr  7 12:31:27 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  7 12:31:27 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  7 12:31:27 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  7 12:31:27 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  7 12:31:27 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  7 12:31:27 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  7 12:31:48 smaug php-fpm[70818]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  7 12:31:48 smaug check_reload_status[718]: Syncing firewall
Apr  7 12:31:51 smaug check_reload_status[718]: Reloading filter
Apr  7 12:31:52 smaug xinetd[81725]: Starting reconfiguration
Apr  7 12:31:52 smaug xinetd[81725]: Swapping defaults
Apr  7 12:31:52 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  7 12:31:52 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  7 12:31:52 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  7 12:31:52 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  7 12:31:52 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  7 12:31:52 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  7 12:32:35 smaug php-fpm[65672]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): NAT: Rule order changed
Apr  7 12:32:35 smaug check_reload_status[718]: Syncing firewall
Apr  7 12:32:38 smaug check_reload_status[718]: Reloading filter
Apr  7 12:32:39 smaug xinetd[81725]: Starting reconfiguration
Apr  7 12:32:39 smaug xinetd[81725]: Swapping defaults
Apr  7 12:32:39 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  7 12:32:39 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  7 12:32:39 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  7 12:32:39 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  7 12:32:39 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  7 12:32:39 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  7 12:52:15 smaug php-fpm[49638]: NOTICE [OpenVPN] user 'haellmay' authenticated
Apr  7 12:53:23 smaug sshd-session[90696]: Connection closed by 192.168.2.254 port 29743
Apr  7 12:53:23 smaug sshd-session[90715]: Connection closed by 192.168.2.254 port 24962
Apr  7 12:53:50 smaug sshd-session[90820]: Connection closed by 192.168.254.250 port 23546
Apr  7 12:53:50 smaug sshd-session[90860]: Connection closed by 192.168.254.250 port 23195
Apr  7 12:54:03 smaug sshd-session[34937]: Connection closed by 192.168.1.200 port 26114
Apr  7 12:54:03 smaug sshd-session[35190]: Connection closed by 192.168.1.200 port 1545
Apr  7 12:54:26 smaug sshd-session[35385]: Connection closed by 192.168.129.1 port 21328
Apr  7 12:54:26 smaug sshd-session[35412]: Connection closed by 192.168.129.1 port 22013
Apr  7 12:55:16 smaug php-fpm[49638]: NOTICE [OpenVPN] user 'doan' authenticated
Apr  7 12:55:34 smaug sshd-session[93762]: Connection closed by 192.168.3.254 port 8631
Apr  7 12:55:34 smaug sshd-session[93982]: Connection closed by 192.168.3.254 port 17008
Apr  7 12:55:43 smaug sshd-session[94225]: Connection closed by 193.97.129.89 port 20326
Apr  7 12:55:43 smaug sshd-session[94494]: Connection closed by 193.97.129.89 port 65270
Apr  7 12:59:08 smaug php-fpm[49638]: NOTICE [OpenVPN] user 'dogan' authenticated
Apr  7 13:12:58 smaug nginx: 2026/04/07 13:12:58 [crit] 11627#100939: *888 SSL_write() failed (SSL: error:8000000D:system library::Permission denied:tls_retry_write_records failure) (13: Permission denied) while processing HTTP/2 connection, client: 192.168.201.11, server: 0.0.0.0:443
Apr  7 13:12:58 smaug nginx: 2026/04/07 13:12:58 [crit] 11627#100939: *891 SSL_write() failed (SSL: error:8000000D:system library::Permission denied:tls_retry_write_records failure) (13: Permission denied) while processing HTTP/2 connection, client: 192.168.201.11, server: 0.0.0.0:443
Apr  7 13:43:03 smaug php-fpm[49638]: NOTICE [OpenVPN] user 'athoti' authenticated
Apr  7 13:53:25 smaug sshd-session[18732]: Connection closed by 192.168.129.1 port 34065
Apr  7 13:53:25 smaug sshd-session[18756]: Connection closed by 192.168.129.1 port 58509
Apr  7 13:54:38 smaug sshd-session[69587]: Connection closed by 193.97.129.12 port 44100
Apr  7 13:54:38 smaug sshd-session[69909]: Connection closed by 193.97.129.12 port 14973
Apr  7 13:54:47 smaug sshd-session[70005]: Connection closed by 192.168.3.254 port 36907
Apr  7 13:54:47 smaug sshd-session[70108]: Connection closed by 192.168.3.254 port 15592
Apr  7 13:55:13 smaug sshd-session[14806]: Connection closed by 192.168.254.250 port 33304
Apr  7 13:55:13 smaug sshd-session[14843]: Connection closed by 192.168.254.250 port 4557
Apr  7 13:55:22 smaug sshd-session[15176]: Connection closed by 192.168.2.254 port 4416
Apr  7 13:55:22 smaug sshd-session[15354]: Connection closed by 192.168.2.254 port 4858
Apr  7 13:55:43 smaug sshd-session[16253]: Connection closed by 192.168.1.200 port 44599
Apr  7 13:55:43 smaug sshd-session[16254]: Connection closed by 192.168.1.200 port 57998
Apr  7 14:11:34 smaug php-fpm[49638]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  7 14:44:06 smaug php[33644]: NOTICE [Snort] Snort Subscriber rules are up to date...
Apr  7 14:44:06 smaug php[33644]: NOTICE [Snort] Snort GPLv2 Community Rules are up to date...
Apr  7 14:44:07 smaug php[33644]: NOTICE [Snort] Emerging Threats Open rules are up to date...
Apr  7 14:44:07 smaug php[33644]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules file update downloaded successfully.
Apr  7 14:44:07 smaug php[33644]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules are up to date...
Apr  7 14:44:07 smaug php[33644]: NOTICE [Snort] The Rules update has finished.
Apr  7 14:54:31 smaug sshd-session[98228]: Connection closed by 193.97.129.12 port 48155
Apr  7 14:54:31 smaug sshd-session[98565]: Connection closed by 193.97.129.12 port 20104
Apr  7 14:54:40 smaug sshd-session[98807]: Connection closed by 192.168.2.254 port 59376
Apr  7 14:54:40 smaug sshd-session[99069]: Connection closed by 192.168.2.254 port 42314
Apr  7 14:55:06 smaug sshd-session[45901]: Connection closed by 192.168.254.250 port 23710
Apr  7 14:55:06 smaug sshd-session[46011]: Connection closed by 192.168.254.250 port 16235
Apr  7 14:55:21 smaug sshd-session[46473]: Connection closed by 192.168.1.200 port 24525
Apr  7 14:55:22 smaug sshd-session[46515]: Connection closed by 192.168.1.200 port 46954
Apr  7 14:55:39 smaug sshd-session[46608]: Connection closed by 192.168.3.254 port 45282
Apr  7 14:55:39 smaug sshd-session[46673]: Connection closed by 192.168.3.254 port 20269
Apr  7 14:55:51 smaug sshd-session[46833]: Connection closed by 192.168.129.1 port 13720
Apr  7 14:55:51 smaug sshd-session[46887]: Connection closed by 192.168.129.1 port 18414
Apr  7 14:58:19 smaug php-fpm[49638]: NOTICE [OpenVPN] user 'jemia' authenticated
Apr  7 14:59:33 smaug php-fpm[49638]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  7 15:22:03 smaug php-fpm[49638]: WARNING [OpenVPN] user 'branz' could not authenticate.
Apr  7 15:22:18 smaug php-fpm[49638]: NOTICE [OpenVPN] user 'branz' authenticated
Apr  7 15:30:56 smaug php-fpm[49638]: WARNING [OpenVPN] user 'branz' could not authenticate.
Apr  7 15:31:13 smaug php-fpm[49638]: NOTICE [OpenVPN] user 'branz' authenticated
Apr  7 15:32:37 smaug php-fpm[49638]: /index.php: Successful login for user 'admin' from: 192.168.130.109 (Local Database)
Apr  7 15:34:33 smaug php-fpm[91444]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: Rules - reordered firewall rules.
Apr  7 15:34:33 smaug check_reload_status[718]: Syncing firewall
Apr  7 15:34:36 smaug check_reload_status[718]: Reloading filter
Apr  7 15:34:37 smaug xinetd[81725]: Starting reconfiguration
Apr  7 15:34:37 smaug xinetd[81725]: Swapping defaults
Apr  7 15:34:37 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  7 15:34:37 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  7 15:34:37 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  7 15:34:37 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  7 15:34:37 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  7 15:34:37 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  7 15:36:24 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  7 15:37:21 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'branz' authenticated
Apr  7 15:38:48 smaug php-fpm[65672]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: Rules - reordered firewall rules.
Apr  7 15:38:49 smaug check_reload_status[718]: Syncing firewall
Apr  7 15:38:51 smaug check_reload_status[718]: Reloading filter
Apr  7 15:38:53 smaug xinetd[81725]: Starting reconfiguration
Apr  7 15:38:53 smaug xinetd[81725]: Swapping defaults
Apr  7 15:38:53 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  7 15:38:53 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  7 15:38:53 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  7 15:38:53 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  7 15:38:53 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  7 15:38:53 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  7 15:45:39 smaug php-fpm[70818]: NOTICE [OpenVPN] user 'branz' authenticated
Apr  7 15:51:54 smaug php-fpm[70818]: NOTICE [OpenVPN] user 'dogan' authenticated
Apr  7 15:54:05 smaug php-fpm[70818]: NOTICE [OpenVPN] user 'jemia' authenticated
Apr  7 15:54:53 smaug php-fpm[70818]: NOTICE [OpenVPN] user 'nowak' authenticated
Apr  7 15:55:41 smaug sshd-session[98974]: Connection closed by 192.168.2.254 port 40013
Apr  7 15:55:41 smaug sshd-session[99314]: Connection closed by 192.168.2.254 port 19989
Apr  7 15:56:07 smaug sshd-session[40517]: Connection closed by 192.168.254.250 port 51030
Apr  7 15:56:07 smaug sshd-session[40712]: Connection closed by 192.168.254.250 port 41096
Apr  7 15:56:15 smaug sshd-session[40968]: Connection closed by 193.97.129.89 port 38859
Apr  7 15:56:15 smaug sshd-session[41023]: Connection closed by 193.97.129.89 port 35756
Apr  7 15:56:24 smaug sshd-session[41331]: Connection closed by 192.168.3.254 port 48903
Apr  7 15:56:24 smaug sshd-session[41614]: Connection closed by 192.168.3.254 port 14644
Apr  7 15:56:36 smaug sshd-session[41830]: Connection closed by 192.168.129.1 port 45421
Apr  7 15:56:36 smaug sshd-session[41951]: Connection closed by 192.168.129.1 port 37131
Apr  7 15:57:39 smaug sshd-session[83485]: Connection closed by 192.168.1.200 port 6552
Apr  7 15:57:39 smaug sshd-session[83732]: Connection closed by 192.168.1.200 port 21136
Apr  7 16:01:50 smaug php-fpm[70818]: NOTICE [OpenVPN] user 'gropp' authenticated
Apr  7 16:13:45 smaug nginx: 2026/04/07 16:13:45 [crit] 11627#100939: *1029 SSL_write() failed (SSL: error:8000000D:system library::Permission denied:tls_retry_write_records failure) (13: Permission denied) while processing HTTP/2 connection, client: 192.168.201.11, server: 0.0.0.0:443
Apr  7 16:14:28 smaug php-fpm[70818]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  7 16:16:50 smaug php-fpm[70818]: NOTICE [OpenVPN] user 'branz' authenticated
Apr  7 16:19:18 smaug php-fpm[70818]: NOTICE [OpenVPN] user 'haellmay' authenticated
Apr  7 16:24:04 smaug php-fpm[70818]: NOTICE [OpenVPN] user 'bullinger' authenticated
Apr  7 16:28:15 smaug php-fpm[73912]: NOTICE [OpenVPN] user 'dogan' authenticated
Apr  7 16:51:19 smaug php-fpm[73912]: NOTICE [OpenVPN] user 'dogan' authenticated
Apr  7 16:52:13 smaug php-fpm[73912]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  7 16:56:37 smaug sshd-session[67251]: Connection closed by 193.97.129.89 port 4777
Apr  7 16:56:37 smaug sshd-session[67287]: Connection closed by 193.97.129.89 port 7691
Apr  7 16:57:05 smaug sshd-session[11983]: Connection closed by 192.168.254.250 port 4685
Apr  7 16:57:05 smaug sshd-session[12152]: Connection closed by 192.168.254.250 port 56347
Apr  7 16:57:14 smaug sshd-session[12214]: Connection closed by 192.168.2.254 port 41678
Apr  7 16:57:14 smaug sshd-session[12417]: Connection closed by 192.168.2.254 port 18494
Apr  7 16:57:35 smaug sshd-session[12668]: Connection closed by 192.168.1.200 port 45076
Apr  7 16:57:35 smaug sshd-session[12981]: Connection closed by 192.168.1.200 port 33001
Apr  7 16:57:50 smaug sshd-session[13032]: Connection closed by 192.168.129.1 port 56347
Apr  7 16:57:50 smaug sshd-session[13235]: Connection closed by 192.168.129.1 port 35205
Apr  7 16:58:52 smaug sshd-session[58184]: Connection closed by 192.168.3.254 port 54488
Apr  7 16:58:52 smaug sshd-session[58312]: Connection closed by 192.168.3.254 port 16002
Apr  7 17:39:55 smaug nginx: 2026/04/07 17:39:55 [error] 11373#100993: *1091 open() "/usr/local/www/realms/master/protocol/openid-connect/auth" failed (2: No such file or directory), client: 192.168.201.11, server: , request: "GET /realms/master/protocol/openid-connect/auth?client_id=security-admin-console&redirect_uri=https%3A%2F%2Fdppint.sf.com%2Fadmin%2Fmaster%2Fconsole%2F%23%2FBaSyx&state=62b8cf12-e376-4697-8e1f-6ca4e8eb56fc&response_mode=fragment&response_type=code&scope=openid&nonce=7bfdd43c-3e6d-4db9-876e-73dc8c50473e&code_challenge=FSetTeUD7bZEcSCXrLnC58ES9Uo3NsMrf6HtD_5TFqQ&code_challenge_method=S256 HTTP/2.0", host: "dppint.sf.com"
Apr  7 17:39:55 smaug nginx: 2026/04/07 17:39:55 [error] 11373#100993: *1091 open() "/usr/local/www/realms/master/protocol/openid-connect/logo.svg" failed (2: No such file or directory), client: 192.168.201.11, server: , request: "GET /realms/master/protocol/openid-connect/logo.svg HTTP/2.0", host: "dppint.sf.com", referrer: "https://dppint.sf.com/realms/master/protocol/openid-connect/auth?client_id=security-admin-console&redirect_uri=https%3A%2F%2Fdppint.sf.com%2Fadmin%2Fmaster%2Fconsole%2F%23%2FBaSyx&state=62b8cf12-e376-4697-8e1f-6ca4e8eb56fc&response_mode=fragment&response_type=code&scope=openid&nonce=7bfdd43c-3e6d-4db9-876e-73dc8c50473e&code_challenge=FSetTeUD7bZEcSCXrLnC58ES9Uo3NsMrf6HtD_5TFqQ&code_challenge_method=S256"
Apr  7 17:55:59 smaug php-fpm[73912]: NOTICE [OpenVPN] user 'jemia' authenticated
Apr  7 17:57:06 smaug sshd-session[32447]: Connection closed by 192.168.254.250 port 45393
Apr  7 17:57:06 smaug sshd-session[32676]: Connection closed by 192.168.254.250 port 34459
Apr  7 17:57:18 smaug sshd-session[32873]: Connection closed by 192.168.1.200 port 38190
Apr  7 17:57:18 smaug sshd-session[33048]: Connection closed by 192.168.1.200 port 60189
Apr  7 17:57:41 smaug sshd-session[57867]: Connection closed by 192.168.129.1 port 20886
Apr  7 17:57:41 smaug sshd-session[58169]: Connection closed by 192.168.129.1 port 54187
Apr  7 17:58:38 smaug sshd-session[79339]: Connection closed by 192.168.3.254 port 31640
Apr  7 17:58:38 smaug sshd-session[79647]: Connection closed by 192.168.3.254 port 58685
Apr  7 17:58:47 smaug sshd-session[20423]: Connection closed by 193.97.129.12 port 11571
Apr  7 17:58:47 smaug sshd-session[20719]: Connection closed by 193.97.129.12 port 59780
Apr  7 17:58:56 smaug sshd-session[20898]: Connection closed by 192.168.2.254 port 56017
Apr  7 17:58:56 smaug sshd-session[20997]: Connection closed by 192.168.2.254 port 52645
Apr  7 18:38:09 smaug php-fpm[73912]: NOTICE [OpenVPN] user 'mishra' authenticated
Apr  7 18:57:26 smaug sshd-session[11102]: Connection closed by 192.168.1.200 port 6027
Apr  7 18:57:26 smaug sshd-session[11353]: Connection closed by 192.168.1.200 port 9387
Apr  7 18:57:41 smaug sshd-session[19569]: Connection closed by 192.168.129.1 port 2456
Apr  7 18:57:41 smaug sshd-session[19582]: Connection closed by 192.168.129.1 port 34149
Apr  7 18:58:26 smaug sshd-session[44723]: Connection closed by 193.97.129.89 port 15043
Apr  7 18:58:26 smaug sshd-session[45049]: Connection closed by 193.97.129.89 port 46115
Apr  7 18:58:35 smaug sshd-session[59641]: Connection closed by 192.168.3.254 port 31016
Apr  7 18:58:35 smaug sshd-session[59855]: Connection closed by 192.168.3.254 port 29527
Apr  7 18:59:03 smaug sshd-session[60675]: Connection closed by 192.168.254.250 port 6530
Apr  7 18:59:03 smaug sshd-session[60958]: Connection closed by 192.168.254.250 port 53312
Apr  7 18:59:12 smaug sshd-session[61060]: Connection closed by 192.168.2.254 port 37024
Apr  7 18:59:12 smaug sshd-session[61400]: Connection closed by 192.168.2.254 port 38513
Apr  7 19:06:20 smaug php-fpm[65672]: /index.php: User logged out for user 'admin' from: 192.168.130.109 (Local Database)
Apr  7 19:51:38 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  7 19:53:48 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'finkenze' authenticated
Apr  7 19:57:26 smaug sshd-session[63078]: Connection closed by 192.168.129.1 port 46206
Apr  7 19:57:26 smaug sshd-session[63345]: Connection closed by 192.168.129.1 port 2363
Apr  7 19:58:08 smaug sshd-session[85509]: Connection closed by 193.97.129.12 port 1415
Apr  7 19:58:08 smaug sshd-session[85776]: Connection closed by 193.97.129.12 port 60775
Apr  7 19:58:17 smaug sshd-session[4976]: Connection closed by 192.168.2.254 port 56926
Apr  7 19:58:17 smaug sshd-session[5165]: Connection closed by 192.168.2.254 port 47809
Apr  7 19:58:44 smaug sshd-session[14978]: Connection closed by 192.168.254.250 port 6377
Apr  7 19:58:44 smaug sshd-session[15114]: Connection closed by 192.168.254.250 port 6181
Apr  7 19:58:56 smaug sshd-session[15183]: Connection closed by 192.168.1.200 port 5444
Apr  7 19:58:56 smaug sshd-session[15390]: Connection closed by 192.168.1.200 port 34455
Apr  7 19:59:17 smaug sshd-session[58565]: Connection closed by 192.168.3.254 port 50967
Apr  7 19:59:17 smaug sshd-session[58792]: Connection closed by 192.168.3.254 port 33021
Apr  7 20:44:18 smaug php[42644]: NOTICE [Snort] There is a new set of Snort Subscriber rules posted. Downloading snortrules-snapshot-29200.tar.gz...
Apr  7 20:44:39 smaug php[42644]: NOTICE [Snort] Snort Subscriber rules file update downloaded successfully
Apr  7 20:44:40 smaug php[42644]: NOTICE [Snort] There is a new set of Snort GPLv2 Community Rules posted. Downloading community-rules.tar.gz...
Apr  7 20:44:41 smaug php[42644]: NOTICE [Snort] Snort GPLv2 Community Rules file update downloaded successfully
Apr  7 20:44:41 smaug php[42644]: NOTICE [Snort] Emerging Threats Open rules are up to date...
Apr  7 20:44:41 smaug php[42644]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules file update downloaded successfully.
Apr  7 20:44:41 smaug php[42644]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules are up to date...
Apr  7 20:44:57 smaug php[42644]: NOTICE [Snort] Updating rules configuration for: LAN ...
Apr  7 20:44:59 smaug php[42644]: NOTICE [Snort] Enabling any flowbit-required rules for: LAN...
Apr  7 20:44:59 smaug php[42644]: NOTICE [Snort] Building new sid-msg.map file for LAN...
Apr  7 20:45:00 smaug php[42644]: NOTICE [Snort] Updating rules configuration for: WAN ...
Apr  7 20:45:03 smaug php[42644]: NOTICE [Snort] Enabling any flowbit-required rules for: WAN...
Apr  7 20:45:03 smaug php[42644]: NOTICE [Snort] Building new sid-msg.map file for WAN...
Apr  7 20:45:04 smaug php[42644]: NOTICE [Snort] Updating rules configuration for: SFIDMZ ...
Apr  7 20:45:06 smaug php[42644]: NOTICE [Snort] Enabling any flowbit-required rules for: SFIDMZ...
Apr  7 20:45:06 smaug php[42644]: NOTICE [Snort] Building new sid-msg.map file for SFIDMZ...
Apr  7 20:45:07 smaug php[42644]: NOTICE [Snort] Updating rules configuration for: SFITMGMNT ...
Apr  7 20:45:09 smaug php[42644]: NOTICE [Snort] Enabling any flowbit-required rules for: SFITMGMNT...
Apr  7 20:45:10 smaug php[42644]: NOTICE [Snort] Building new sid-msg.map file for SFITMGMNT...
Apr  7 20:45:11 smaug php[42644]: NOTICE [Snort] The Rules update has finished.
Apr  7 20:58:54 smaug sshd-session[29494]: Connection closed by 192.168.129.1 port 16434
Apr  7 20:58:54 smaug sshd-session[29512]: Connection closed by 192.168.129.1 port 46556
Apr  7 20:59:49 smaug sshd-session[37980]: Connection closed by 192.168.3.254 port 60170
Apr  7 20:59:49 smaug sshd-session[38047]: Connection closed by 192.168.3.254 port 14024
Apr  7 21:00:17 smaug sshd-session[88587]: Connection closed by 192.168.254.250 port 43594
Apr  7 21:00:17 smaug sshd-session[88876]: Connection closed by 192.168.254.250 port 15163
Apr  7 21:00:26 smaug sshd-session[89511]: Connection closed by 192.168.1.200 port 47566
Apr  7 21:00:26 smaug sshd-session[89572]: Connection closed by 192.168.1.200 port 6220
Apr  7 21:00:35 smaug sshd-session[89822]: Connection closed by 193.97.129.89 port 7561
Apr  7 21:00:35 smaug sshd-session[89886]: Connection closed by 193.97.129.89 port 58265
Apr  7 21:00:44 smaug sshd-session[90067]: Connection closed by 192.168.2.254 port 57190
Apr  7 21:00:44 smaug sshd-session[90229]: Connection closed by 192.168.2.254 port 60851
Apr  7 21:59:57 smaug sshd-session[4373]: Connection closed by 192.168.1.200 port 20581
Apr  7 21:59:57 smaug sshd-session[4407]: Connection closed by 192.168.1.200 port 6420
Apr  7 22:00:17 smaug sshd-session[16784]: Connection closed by 192.168.129.1 port 12936
Apr  7 22:00:17 smaug sshd-session[16933]: Connection closed by 192.168.129.1 port 22204
Apr  7 22:01:05 smaug sshd-session[59081]: Connection closed by 192.168.3.254 port 14620
Apr  7 22:01:05 smaug sshd-session[59133]: Connection closed by 192.168.3.254 port 49316
Apr  7 22:01:14 smaug sshd-session[59373]: Connection closed by 193.97.129.89 port 18884
Apr  7 22:01:14 smaug sshd-session[59571]: Connection closed by 193.97.129.89 port 58977
Apr  7 22:01:23 smaug sshd-session[59843]: Connection closed by 192.168.2.254 port 13428
Apr  7 22:01:23 smaug sshd-session[60097]: Connection closed by 192.168.2.254 port 61703
Apr  7 22:01:51 smaug sshd-session[2720]: Connection closed by 192.168.254.250 port 61520
Apr  7 22:01:51 smaug sshd-session[3000]: Connection closed by 192.168.254.250 port 22974
Apr  7 22:52:17 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'haellmay' authenticated
Apr  7 23:00:39 smaug sshd-session[87249]: Connection closed by 192.168.129.1 port 21171
Apr  7 23:00:39 smaug sshd-session[87294]: Connection closed by 192.168.129.1 port 29818
Apr  7 23:01:25 smaug sshd-session[39397]: Connection closed by 192.168.3.254 port 51329
Apr  7 23:01:25 smaug sshd-session[39674]: Connection closed by 192.168.3.254 port 44443
Apr  7 23:01:34 smaug sshd-session[39882]: Connection closed by 193.97.129.12 port 61992
Apr  7 23:01:34 smaug sshd-session[40058]: Connection closed by 193.97.129.12 port 18332
Apr  7 23:01:43 smaug sshd-session[40187]: Connection closed by 192.168.2.254 port 64219
Apr  7 23:01:43 smaug sshd-session[40416]: Connection closed by 192.168.2.254 port 12451
Apr  7 23:02:09 smaug sshd-session[41081]: Connection closed by 192.168.254.250 port 59533
Apr  7 23:02:09 smaug sshd-session[41205]: Connection closed by 192.168.254.250 port 11706
Apr  7 23:02:21 smaug sshd-session[83462]: Connection closed by 192.168.1.200 port 63804
Apr  7 23:02:21 smaug sshd-session[83667]: Connection closed by 192.168.1.200 port 14214
Apr  8 00:01:45 smaug sshd-session[78114]: Connection closed by 193.97.129.89 port 9079
Apr  8 00:01:45 smaug sshd-session[78455]: Connection closed by 193.97.129.89 port 61921
Apr  8 00:02:12 smaug sshd-session[23185]: Connection closed by 192.168.254.250 port 51009
Apr  8 00:02:12 smaug sshd-session[23343]: Connection closed by 192.168.254.250 port 52647
Apr  8 00:02:21 smaug sshd-session[23417]: Connection closed by 192.168.2.254 port 32185
Apr  8 00:02:21 smaug sshd-session[23661]: Connection closed by 192.168.2.254 port 8335
Apr  8 00:02:42 smaug sshd-session[24246]: Connection closed by 192.168.1.200 port 38706
Apr  8 00:02:42 smaug sshd-session[24414]: Connection closed by 192.168.1.200 port 16894
Apr  8 00:02:53 smaug sshd-session[24672]: Connection closed by 192.168.129.1 port 32879
Apr  8 00:02:53 smaug sshd-session[24949]: Connection closed by 192.168.129.1 port 10875
Apr  8 00:03:36 smaug sshd-session[67886]: Connection closed by 192.168.3.254 port 51984
Apr  8 00:03:36 smaug sshd-session[68200]: Connection closed by 192.168.3.254 port 54282
Apr  8 00:17:14 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'athoti' authenticated
Apr  8 00:30:05 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  8 00:34:00 smaug nginx: 2026/04/08 00:34:00 [error] 11373#100993: *1206 "/usr/local/www/admin/index.php" is not found (2: No such file or directory), client: 192.168.201.11, server: , request: "GET /admin/ HTTP/2.0", host: "dppint.sf.com"
Apr  8 00:34:00 smaug nginx: 2026/04/08 00:34:00 [error] 11373#100993: *1206 open() "/usr/local/www/admin/logo.svg" failed (2: No such file or directory), client: 192.168.201.11, server: , request: "GET /admin/logo.svg HTTP/2.0", host: "dppint.sf.com", referrer: "https://dppint.sf.com/admin/"
Apr  8 00:35:10 smaug nginx: 2026/04/08 00:35:10 [crit] 11627#100939: *1208 SSL_write() failed (SSL: error:8000000D:system library::Permission denied:tls_retry_write_records failure) (13: Permission denied) while processing HTTP/2 connection, client: 192.168.201.11, server: 0.0.0.0:443
Apr  8 00:35:10 smaug nginx: 2026/04/08 00:35:10 [crit] 11373#100993: *1206 SSL_write() failed (SSL: error:8000000D:system library::Permission denied:tls_retry_write_records failure) (13: Permission denied) while processing HTTP/2 connection, client: 192.168.201.11, server: 0.0.0.0:443
Apr  8 01:02:24 smaug sshd-session[81014]: Connection closed by 192.168.3.254 port 52106
Apr  8 01:02:24 smaug sshd-session[81161]: Connection closed by 192.168.3.254 port 54684
Apr  8 01:02:35 smaug sshd-session[81539]: Connection closed by 192.168.129.1 port 34070
Apr  8 01:02:35 smaug sshd-session[81656]: Connection closed by 192.168.129.1 port 37139
Apr  8 01:03:25 smaug sshd-session[23168]: Connection closed by 192.168.2.254 port 54895
Apr  8 01:03:25 smaug sshd-session[23229]: Connection closed by 192.168.2.254 port 22361
Apr  8 01:03:33 smaug sshd-session[23562]: Connection closed by 193.97.129.12 port 37154
Apr  8 01:03:33 smaug sshd-session[23807]: Connection closed by 193.97.129.12 port 11501
Apr  8 01:03:46 smaug sshd-session[65431]: Connection closed by 192.168.1.200 port 60090
Apr  8 01:03:46 smaug sshd-session[65519]: Connection closed by 192.168.1.200 port 6620
Apr  8 01:04:13 smaug sshd-session[66767]: Connection closed by 192.168.254.250 port 20725
Apr  8 01:04:13 smaug sshd-session[67064]: Connection closed by 192.168.254.250 port 58794
Apr  8 01:07:55 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'nowak' authenticated
Apr  8 01:27:35 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'nowak' authenticated
Apr  8 02:02:37 smaug sshd-session[274]: Connection closed by 192.168.3.254 port 47662
Apr  8 02:02:38 smaug sshd-session[565]: Connection closed by 192.168.3.254 port 45003
Apr  8 02:02:49 smaug sshd-session[673]: Connection closed by 192.168.129.1 port 2216
Apr  8 02:02:49 smaug sshd-session[811]: Connection closed by 192.168.129.1 port 37657
Apr  8 02:03:36 smaug sshd-session[51788]: Connection closed by 192.168.2.254 port 27765
Apr  8 02:03:36 smaug sshd-session[51821]: Connection closed by 192.168.2.254 port 42664
Apr  8 02:03:45 smaug sshd-session[52080]: Connection closed by 193.97.129.89 port 35398
Apr  8 02:03:45 smaug sshd-session[52391]: Connection closed by 193.97.129.89 port 33633
Apr  8 02:04:00 smaug sshd-session[53234]: Connection closed by 192.168.1.200 port 32173
Apr  8 02:04:00 smaug sshd-session[53412]: Connection closed by 192.168.1.200 port 56800
Apr  8 02:04:29 smaug sshd-session[97738]: Connection closed by 192.168.254.250 port 23767
Apr  8 02:04:29 smaug sshd-session[97789]: Connection closed by 192.168.254.250 port 59498
Apr  8 02:44:26 smaug php[96311]: NOTICE [Snort] Snort Subscriber rules are up to date...
Apr  8 02:44:27 smaug php[96311]: NOTICE [Snort] Snort GPLv2 Community Rules are up to date...
Apr  8 02:44:27 smaug php[96311]: NOTICE [Snort] There is a new set of Emerging Threats Open rules posted. Downloading emerging.rules.tar.gz...
Apr  8 02:44:29 smaug php[96311]: NOTICE [Snort] Emerging Threats Open rules file update downloaded successfully
Apr  8 02:44:29 smaug php[96311]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules file update downloaded successfully.
Apr  8 02:44:29 smaug php[96311]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules are up to date...
Apr  8 02:44:29 smaug php[96311]: NOTICE [Snort] Updating rules configuration for: LAN ...
Apr  8 02:44:32 smaug php[96311]: NOTICE [Snort] Enabling any flowbit-required rules for: LAN...
Apr  8 02:44:32 smaug php[96311]: NOTICE [Snort] Building new sid-msg.map file for LAN...
Apr  8 02:44:33 smaug php[96311]: NOTICE [Snort] Updating rules configuration for: WAN ...
Apr  8 02:44:35 smaug php[96311]: NOTICE [Snort] Enabling any flowbit-required rules for: WAN...
Apr  8 02:44:35 smaug php[96311]: NOTICE [Snort] Building new sid-msg.map file for WAN...
Apr  8 02:44:36 smaug php[96311]: NOTICE [Snort] Updating rules configuration for: SFIDMZ ...
Apr  8 02:44:38 smaug php[96311]: NOTICE [Snort] Enabling any flowbit-required rules for: SFIDMZ...
Apr  8 02:44:38 smaug php[96311]: NOTICE [Snort] Building new sid-msg.map file for SFIDMZ...
Apr  8 02:44:39 smaug php[96311]: NOTICE [Snort] Updating rules configuration for: SFITMGMNT ...
Apr  8 02:44:42 smaug php[96311]: NOTICE [Snort] Enabling any flowbit-required rules for: SFITMGMNT...
Apr  8 02:44:42 smaug php[96311]: NOTICE [Snort] Building new sid-msg.map file for SFITMGMNT...
Apr  8 02:44:43 smaug php[96311]: NOTICE [Snort] The Rules update has finished.
Apr  8 03:02:48 smaug sshd-session[23724]: Connection closed by 192.168.2.254 port 40345
Apr  8 03:02:48 smaug sshd-session[23869]: Connection closed by 192.168.2.254 port 23436
Apr  8 03:02:57 smaug sshd-session[24115]: Connection closed by 193.97.129.89 port 20773
Apr  8 03:02:57 smaug sshd-session[24305]: Connection closed by 193.97.129.89 port 8460
Apr  8 03:03:09 smaug sshd-session[64875]: Connection closed by 192.168.129.1 port 21155
Apr  8 03:03:09 smaug sshd-session[64894]: Connection closed by 192.168.129.1 port 40482
Apr  8 03:03:57 smaug sshd-session[74503]: Connection closed by 192.168.3.254 port 55973
Apr  8 03:03:57 smaug sshd-session[74757]: Connection closed by 192.168.3.254 port 55555
Apr  8 03:04:17 smaug sshd-session[18263]: Connection closed by 192.168.1.200 port 3580
Apr  8 03:04:17 smaug sshd-session[18340]: Connection closed by 192.168.1.200 port 55898
Apr  8 03:04:49 smaug sshd-session[18432]: Connection closed by 192.168.254.250 port 41552
Apr  8 03:04:49 smaug sshd-session[18648]: Connection closed by 192.168.254.250 port 30925
Apr  8 04:03:50 smaug sshd-session[16758]: Connection closed by 192.168.129.1 port 11962
Apr  8 04:03:50 smaug sshd-session[16828]: Connection closed by 192.168.129.1 port 49029
Apr  8 04:04:32 smaug sshd-session[26043]: Connection closed by 192.168.3.254 port 17415
Apr  8 04:04:32 smaug sshd-session[26186]: Connection closed by 192.168.3.254 port 60023
Apr  8 04:04:56 smaug sshd-session[71043]: Connection closed by 192.168.1.200 port 18267
Apr  8 04:04:56 smaug sshd-session[71117]: Connection closed by 192.168.1.200 port 46329
Apr  8 04:05:28 smaug sshd-session[74088]: Connection closed by 192.168.254.250 port 12300
Apr  8 04:05:28 smaug sshd-session[74304]: Connection closed by 192.168.254.250 port 49024
Apr  8 04:05:37 smaug sshd-session[74510]: Connection closed by 192.168.2.254 port 10961
Apr  8 04:05:37 smaug sshd-session[74773]: Connection closed by 192.168.2.254 port 27632
Apr  8 04:05:46 smaug sshd-session[549]: Connection closed by 193.97.129.89 port 57885
Apr  8 04:05:46 smaug sshd-session[618]: Connection closed by 193.97.129.89 port 41618
Apr  8 04:31:07 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'athoti' authenticated
Apr  8 05:04:14 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'doan' authenticated
Apr  8 05:04:17 smaug sshd-session[46299]: Connection closed by 192.168.129.1 port 37723
Apr  8 05:04:17 smaug sshd-session[46480]: Connection closed by 192.168.129.1 port 14497
Apr  8 05:05:02 smaug sshd-session[87476]: Connection closed by 192.168.2.254 port 15780
Apr  8 05:05:02 smaug sshd-session[87519]: Connection closed by 192.168.2.254 port 39265
Apr  8 05:05:11 smaug sshd-session[87769]: Connection closed by 193.97.129.89 port 63869
Apr  8 05:05:11 smaug sshd-session[87843]: Connection closed by 193.97.129.89 port 48444
Apr  8 05:05:26 smaug sshd-session[36487]: Connection closed by 192.168.1.200 port 64095
Apr  8 05:05:26 smaug sshd-session[36758]: Connection closed by 192.168.1.200 port 13261
Apr  8 05:05:56 smaug sshd-session[37094]: Connection closed by 192.168.254.250 port 25199
Apr  8 05:05:56 smaug sshd-session[37330]: Connection closed by 192.168.254.250 port 21576
Apr  8 05:06:05 smaug sshd-session[38566]: Connection closed by 192.168.3.254 port 28495
Apr  8 05:06:05 smaug sshd-session[38763]: Connection closed by 192.168.3.254 port 60708
Apr  8 05:10:04 smaug sshd-session[23579]: Accepted publickey for root from 192.168.160.1 port 49570 ssh2: ED25519 SHA256:lhx8qhHzS6pElUDrQjRU0nd2Nr539mrE9OhXE0imD4s
Apr  8 05:10:05 smaug sshd-session[24059]: Received disconnect from 192.168.160.1 port 49570:11: disconnected by user
Apr  8 05:10:05 smaug sshd-session[24059]: Disconnected from user root 192.168.160.1 port 49570
Apr  8 05:43:54 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'nowak' authenticated
Apr  8 06:04:51 smaug sshd-session[94401]: Connection closed by 192.168.2.254 port 55310
Apr  8 06:04:51 smaug sshd-session[94446]: Connection closed by 192.168.2.254 port 36244
Apr  8 06:05:20 smaug sshd-session[39714]: Connection closed by 192.168.254.250 port 44018
Apr  8 06:05:20 smaug sshd-session[39814]: Connection closed by 192.168.254.250 port 18184
Apr  8 06:05:35 smaug sshd-session[39886]: Connection closed by 192.168.1.200 port 19403
Apr  8 06:05:35 smaug sshd-session[40014]: Connection closed by 192.168.1.200 port 9690
Apr  8 06:05:55 smaug sshd-session[40232]: Connection closed by 192.168.129.1 port 46804
Apr  8 06:05:55 smaug sshd-session[40419]: Connection closed by 192.168.129.1 port 39616
Apr  8 06:06:42 smaug sshd-session[94718]: Connection closed by 192.168.3.254 port 43180
Apr  8 06:06:42 smaug sshd-session[94784]: Connection closed by 192.168.3.254 port 7603
Apr  8 06:06:51 smaug sshd-session[95096]: Connection closed by 193.97.129.89 port 43364
Apr  8 06:06:51 smaug sshd-session[95231]: Connection closed by 193.97.129.89 port 13672
Apr  8 06:43:14 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'bullinger' authenticated
Apr  8 06:48:45 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'nowak' authenticated
Apr  8 07:04:53 smaug sshd-session[61047]: Connection closed by 192.168.129.1 port 9710
Apr  8 07:04:53 smaug sshd-session[61158]: Connection closed by 192.168.129.1 port 19327
Apr  8 07:05:49 smaug sshd-session[3756]: Connection closed by 192.168.3.254 port 56563
Apr  8 07:05:49 smaug sshd-session[3771]: Connection closed by 192.168.3.254 port 63300
Apr  8 07:06:18 smaug sshd-session[4724]: Connection closed by 192.168.254.250 port 47188
Apr  8 07:06:18 smaug sshd-session[5018]: Connection closed by 192.168.254.250 port 16643
Apr  8 07:06:30 smaug sshd-session[5115]: Connection closed by 192.168.1.200 port 18850
Apr  8 07:06:30 smaug sshd-session[5364]: Connection closed by 192.168.1.200 port 63462
Apr  8 07:06:39 smaug sshd-session[5535]: Connection closed by 193.97.129.89 port 49266
Apr  8 07:06:39 smaug sshd-session[5730]: Connection closed by 193.97.129.89 port 25231
Apr  8 07:06:48 smaug sshd-session[47515]: Connection closed by 192.168.2.254 port 4995
Apr  8 07:06:48 smaug sshd-session[47668]: Connection closed by 192.168.2.254 port 53416
Apr  8 07:38:21 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'bullinger' authenticated
Apr  8 07:45:08 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'nowak' authenticated
Apr  8 08:03:59 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'rudolph' authenticated
Apr  8 08:05:24 smaug sshd-session[36603]: Connection closed by 192.168.1.200 port 42804
Apr  8 08:05:24 smaug sshd-session[36640]: Connection closed by 192.168.1.200 port 12277
Apr  8 08:05:44 smaug sshd-session[79213]: Connection closed by 192.168.2.254 port 32857
Apr  8 08:05:44 smaug sshd-session[79337]: Connection closed by 192.168.2.254 port 63759
Apr  8 08:06:11 smaug sshd-session[80039]: Connection closed by 192.168.254.250 port 49378
Apr  8 08:06:11 smaug sshd-session[80280]: Connection closed by 192.168.254.250 port 33656
Apr  8 08:06:20 smaug sshd-session[80515]: Connection closed by 193.97.129.89 port 64894
Apr  8 08:06:20 smaug sshd-session[80553]: Connection closed by 193.97.129.89 port 9906
Apr  8 08:06:29 smaug sshd-session[99122]: Connection closed by 192.168.3.254 port 44934
Apr  8 08:06:29 smaug sshd-session[99162]: Connection closed by 192.168.3.254 port 35209
Apr  8 08:06:41 smaug sshd-session[19944]: Connection closed by 192.168.129.1 port 40256
Apr  8 08:06:41 smaug sshd-session[19982]: Connection closed by 192.168.129.1 port 59463
Apr  8 08:14:25 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'finkenze' authenticated
Apr  8 08:25:06 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'branz' authenticated
Apr  8 08:29:17 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'saxena' authenticated
Apr  8 08:41:49 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'dogan' authenticated
Apr  8 08:44:35 smaug php[68276]: NOTICE [Snort] Snort Subscriber rules are up to date...
Apr  8 08:44:35 smaug php[68276]: NOTICE [Snort] Snort GPLv2 Community Rules are up to date...
Apr  8 08:44:36 smaug php[68276]: NOTICE [Snort] Emerging Threats Open rules are up to date...
Apr  8 08:44:36 smaug php[68276]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules file update downloaded successfully.
Apr  8 08:44:36 smaug php[68276]: NOTICE [Snort] Feodo Tracker Botnet C2 IP rules are up to date...
Apr  8 08:44:36 smaug php[68276]: NOTICE [Snort] The Rules update has finished.
Apr  8 08:49:58 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'mishra' authenticated
Apr  8 08:52:22 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'gropp' authenticated
Apr  8 08:56:35 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'Babl' authenticated
Apr  8 08:57:38 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  8 09:02:46 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'haellmay' authenticated
Apr  8 09:05:48 smaug sshd-session[5226]: Connection closed by 192.168.1.200 port 45973
Apr  8 09:05:48 smaug sshd-session[5477]: Connection closed by 192.168.1.200 port 4289
Apr  8 09:06:18 smaug sshd-session[6761]: Connection closed by 192.168.254.250 port 48052
Apr  8 09:06:18 smaug sshd-session[6932]: Connection closed by 192.168.254.250 port 47402
Apr  8 09:06:35 smaug sshd-session[48482]: Connection closed by 192.168.3.254 port 40891
Apr  8 09:06:35 smaug sshd-session[48822]: Connection closed by 192.168.3.254 port 60976
Apr  8 09:06:46 smaug sshd-session[48945]: Connection closed by 192.168.129.1 port 39547
Apr  8 09:06:46 smaug sshd-session[49263]: Connection closed by 192.168.129.1 port 43140
Apr  8 09:07:52 smaug sshd-session[92519]: Connection closed by 192.168.2.254 port 65493
Apr  8 09:07:52 smaug sshd-session[92753]: Connection closed by 192.168.2.254 port 56581
Apr  8 09:08:01 smaug sshd-session[94098]: Connection closed by 193.97.129.89 port 28115
Apr  8 09:08:01 smaug sshd-session[94240]: Connection closed by 193.97.129.89 port 43212
Apr  8 09:33:12 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'bullinger' authenticated
Apr  8 09:50:10 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'haellmay' authenticated
Apr  8 10:00:59 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'sonnleitner' authenticated
Apr  8 10:01:16 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  8 10:07:16 smaug sshd-session[16317]: Connection closed by 192.168.254.250 port 35860
Apr  8 10:07:16 smaug sshd-session[16367]: Connection closed by 192.168.254.250 port 12740
Apr  8 10:07:31 smaug sshd-session[60074]: Connection closed by 192.168.1.200 port 3082
Apr  8 10:07:31 smaug sshd-session[60090]: Connection closed by 192.168.1.200 port 48678
Apr  8 10:07:43 smaug sshd-session[60823]: Connection closed by 193.97.129.89 port 33714
Apr  8 10:07:43 smaug sshd-session[60969]: Connection closed by 193.97.129.89 port 10993
Apr  8 10:07:52 smaug sshd-session[61020]: Connection closed by 192.168.2.254 port 22839
Apr  8 10:07:52 smaug sshd-session[61085]: Connection closed by 192.168.2.254 port 23706
Apr  8 10:08:03 smaug sshd-session[62232]: Connection closed by 192.168.129.1 port 50254
Apr  8 10:08:03 smaug sshd-session[62447]: Connection closed by 192.168.129.1 port 8977
Apr  8 10:08:56 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'sonnleitner' authenticated
Apr  8 10:09:12 smaug sshd-session[25107]: Connection closed by 192.168.3.254 port 51999
Apr  8 10:09:12 smaug sshd-session[25182]: Connection closed by 192.168.3.254 port 48532
Apr  8 10:25:16 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'saxena' authenticated
Apr  8 10:25:27 smaug php-fpm[45870]: NOTICE [OpenVPN] user 'gropp' authenticated
Apr  8 11:06:49 smaug sshd-session[84574]: Connection closed by 192.168.2.254 port 38297
Apr  8 11:06:49 smaug sshd-session[84780]: Connection closed by 192.168.2.254 port 20255
Apr  8 11:07:20 smaug sshd-session[8075]: Connection closed by 192.168.254.250 port 4565
Apr  8 11:07:20 smaug sshd-session[8242]: Connection closed by 192.168.254.250 port 30601
Apr  8 11:07:35 smaug sshd-session[29611]: Connection closed by 192.168.1.200 port 16989
Apr  8 11:07:35 smaug sshd-session[29949]: Connection closed by 192.168.1.200 port 8543
Apr  8 11:07:58 smaug sshd-session[30642]: Connection closed by 192.168.129.1 port 62860
Apr  8 11:07:58 smaug sshd-session[30848]: Connection closed by 192.168.129.1 port 31117
Apr  8 11:09:11 smaug sshd-session[76092]: Connection closed by 192.168.3.254 port 42167
Apr  8 11:09:11 smaug sshd-session[76293]: Connection closed by 192.168.3.254 port 16615
Apr  8 11:09:20 smaug sshd-session[76428]: Connection closed by 193.97.129.89 port 50968
Apr  8 11:09:20 smaug sshd-session[76617]: Connection closed by 193.97.129.89 port 2625
Apr  8 11:13:37 smaug php-fpm[45870]: /index.php: Successful login for user 'admin' from: 192.168.138.164 (Local Database)
Apr  8 11:19:04 smaug php-fpm[49638]: WARNING Could not check for system updates: DNS servers not available
Apr  8 11:19:56 smaug bandwidthd[69702]: DNS timeout for 193.97.129.89: This problem reduces graphing performance
Apr  8 11:30:18 smaug php-fpm[49638]: /index.php: Successful login for user 'admin' from: 192.168.129.10 (Local Database)
Apr  8 11:47:04 smaug php-fpm[45870]: WARNING Could not check for system updates: DNS servers not available
Apr  8 11:48:31 smaug php-fpm[91444]: /index.php: webConfigurator authentication error for user 'admin' from: 192.168.130.109
Apr  8 11:48:37 smaug php-fpm[65672]: /index.php: Successful login for user 'admin' from: 192.168.130.109 (Local Database)
Apr  8 11:52:13 smaug sshd-session[97055]: Accepted publickey for admin from 192.168.138.164 port 62689 ssh2: ED25519 SHA256:NKB+/pC92A6VPDCSrwQzoTCSz2YdBeTFqVFgsrE1O1U
Apr  8 11:52:27 smaug sshd-session[30747]: Connection closed by 192.168.138.164 port 62689
Apr  8 11:53:17 smaug php-fpm[73912]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  8 11:53:17 smaug check_reload_status[718]: Syncing firewall
Apr  8 11:53:20 smaug check_reload_status[718]: Reloading filter
Apr  8 11:53:21 smaug xinetd[81725]: Starting reconfiguration
Apr  8 11:53:21 smaug xinetd[81725]: Swapping defaults
Apr  8 11:53:21 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  8 11:53:21 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  8 11:53:21 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  8 11:53:21 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  8 11:53:21 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  8 11:53:21 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  8 11:54:14 smaug php-fpm[91444]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  8 11:54:15 smaug check_reload_status[718]: Syncing firewall
Apr  8 11:54:17 smaug check_reload_status[718]: Reloading filter
Apr  8 11:54:19 smaug xinetd[81725]: Starting reconfiguration
Apr  8 11:54:19 smaug xinetd[81725]: Swapping defaults
Apr  8 11:54:19 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  8 11:54:19 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  8 11:54:19 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  8 11:54:19 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  8 11:54:19 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  8 11:54:19 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  8 11:55:34 smaug php-fpm[27115]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  8 11:55:35 smaug check_reload_status[718]: Syncing firewall
Apr  8 11:55:37 smaug check_reload_status[718]: Reloading filter
Apr  8 11:55:38 smaug xinetd[81725]: Starting reconfiguration
Apr  8 11:55:38 smaug xinetd[81725]: Swapping defaults
Apr  8 11:55:38 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  8 11:55:38 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  8 11:55:38 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  8 11:55:38 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  8 11:55:38 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  8 11:55:38 smaug xinetd[81725]: Reconfigured: new=0 old=5 dropped=0 (services)
Apr  8 11:57:26 smaug php-fpm[91444]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  8 11:57:48 smaug php-fpm[91444]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  8 11:57:48 smaug check_reload_status[718]: Syncing firewall
Apr  8 11:57:51 smaug check_reload_status[718]: Reloading filter
Apr  8 11:57:52 smaug xinetd[81725]: Starting reconfiguration
Apr  8 11:57:52 smaug xinetd[81725]: Swapping defaults
Apr  8 11:57:52 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  8 11:57:52 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  8 11:57:52 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  8 11:57:52 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  8 11:57:52 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  8 11:57:52 smaug xinetd[81725]: Reconfigured: new=1 old=5 dropped=0 (services)
Apr  8 11:58:06 smaug php-fpm[91444]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  8 11:58:06 smaug check_reload_status[718]: Syncing firewall
Apr  8 11:58:09 smaug check_reload_status[718]: Reloading filter
Apr  8 11:58:10 smaug xinetd[81725]: Starting reconfiguration
Apr  8 11:58:10 smaug xinetd[81725]: Swapping defaults
Apr  8 11:58:10 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  8 11:58:10 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  8 11:58:10 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  8 11:58:10 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  8 11:58:10 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  8 11:58:10 smaug xinetd[81725]: readjusting service 19005-tcp
Apr  8 11:58:10 smaug xinetd[81725]: Reconfigured: new=0 old=6 dropped=0 (services)
Apr  8 12:00:24 smaug php-fpm[73912]: NOTICE [OpenVPN] user 'branz' authenticated
Apr  8 12:03:33 smaug php-fpm[65672]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: Rules - reordered firewall rules.
Apr  8 12:03:34 smaug check_reload_status[718]: Syncing firewall
Apr  8 12:03:47 smaug check_reload_status[718]: Reloading filter
Apr  8 12:03:48 smaug xinetd[81725]: Starting reconfiguration
Apr  8 12:03:48 smaug xinetd[81725]: Swapping defaults
Apr  8 12:03:48 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  8 12:03:48 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  8 12:03:48 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  8 12:03:48 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  8 12:03:48 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  8 12:03:48 smaug xinetd[81725]: readjusting service 19005-tcp
Apr  8 12:03:48 smaug xinetd[81725]: Reconfigured: new=0 old=6 dropped=0 (services)
Apr  8 12:05:39 smaug php-fpm[6220]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  8 12:05:39 smaug check_reload_status[718]: Syncing firewall
Apr  8 12:06:04 smaug php-fpm[91444]: NOTICE [OpenVPN] user 'dogan' authenticated
Apr  8 12:06:15 smaug php-fpm[70818]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  8 12:06:16 smaug check_reload_status[718]: Syncing firewall
Apr  8 12:06:17 smaug php-fpm[65672]: NOTICE [OpenVPN] user 'bader' authenticated
Apr  8 12:06:18 smaug check_reload_status[718]: Reloading filter
Apr  8 12:06:20 smaug xinetd[81725]: Starting reconfiguration
Apr  8 12:06:20 smaug xinetd[81725]: Swapping defaults
Apr  8 12:06:20 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  8 12:06:20 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  8 12:06:20 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  8 12:06:20 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  8 12:06:20 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  8 12:06:20 smaug xinetd[81725]: readjusting service 19005-tcp
Apr  8 12:06:20 smaug xinetd[81725]: Reconfigured: new=1 old=6 dropped=0 (services)
Apr  8 12:07:53 smaug sshd-session[62613]: Connection closed by 192.168.3.254 port 16988
Apr  8 12:07:53 smaug sshd-session[63812]: Connection closed by 192.168.3.254 port 42731
Apr  8 12:08:04 smaug sshd-session[23067]: Connection closed by 192.168.129.1 port 48614
Apr  8 12:08:04 smaug sshd-session[23174]: Connection closed by 192.168.129.1 port 56639
Apr  8 12:08:58 smaug sshd-session[95633]: Connection closed by 192.168.2.254 port 8194
Apr  8 12:08:58 smaug sshd-session[95958]: Connection closed by 192.168.2.254 port 34445
Apr  8 12:09:07 smaug sshd-session[55926]: Connection closed by 193.97.129.89 port 3492
Apr  8 12:09:07 smaug sshd-session[56022]: Connection closed by 193.97.129.89 port 37558
Apr  8 12:09:22 smaug sshd-session[50088]: Connection closed by 192.168.1.200 port 19623
Apr  8 12:09:22 smaug sshd-session[50326]: Connection closed by 192.168.1.200 port 45811
Apr  8 12:09:52 smaug sshd-session[88138]: Connection closed by 192.168.254.250 port 59763
Apr  8 12:09:52 smaug sshd-session[88420]: Connection closed by 192.168.254.250 port 23310
Apr  8 12:10:18 smaug php-fpm[70818]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: NAT: Port Forward - saved/edited a port forward rule.
Apr  8 12:10:18 smaug check_reload_status[718]: Syncing firewall
Apr  8 12:10:20 smaug check_reload_status[718]: Reloading filter
Apr  8 12:10:22 smaug xinetd[81725]: Starting reconfiguration
Apr  8 12:10:22 smaug xinetd[81725]: Swapping defaults
Apr  8 12:10:22 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  8 12:10:22 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  8 12:10:22 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  8 12:10:22 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  8 12:10:22 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  8 12:10:22 smaug xinetd[81725]: readjusting service 19005-tcp
Apr  8 12:10:22 smaug xinetd[81725]: readjusting service 19006-tcp
Apr  8 12:10:22 smaug xinetd[81725]: Reconfigured: new=0 old=7 dropped=0 (services)
Apr  8 12:10:46 smaug php-fpm[20422]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: Rules - reordered firewall rules.
Apr  8 12:10:46 smaug check_reload_status[718]: Syncing firewall
Apr  8 12:10:57 smaug check_reload_status[718]: Reloading filter
Apr  8 12:10:58 smaug xinetd[81725]: Starting reconfiguration
Apr  8 12:10:58 smaug xinetd[81725]: Swapping defaults
Apr  8 12:10:58 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  8 12:10:58 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  8 12:10:58 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  8 12:10:58 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  8 12:10:58 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  8 12:10:58 smaug xinetd[81725]: readjusting service 19005-tcp
Apr  8 12:10:58 smaug xinetd[81725]: readjusting service 19006-tcp
Apr  8 12:10:58 smaug xinetd[81725]: Reconfigured: new=0 old=7 dropped=0 (services)
Apr  8 12:12:39 smaug php-fpm[91444]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: Rules - disabled a firewall rule.
Apr  8 12:12:39 smaug check_reload_status[718]: Syncing firewall
Apr  8 12:12:49 smaug php-fpm[20422]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: Rules - disabled a firewall rule.
Apr  8 12:12:50 smaug check_reload_status[718]: Syncing firewall
Apr  8 12:12:53 smaug php-fpm[20422]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: Rules - disabled a firewall rule.
Apr  8 12:12:54 smaug check_reload_status[718]: Syncing firewall
Apr  8 12:12:58 smaug php-fpm[73912]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: Rules - disabled a firewall rule.
Apr  8 12:12:58 smaug check_reload_status[718]: Syncing firewall
Apr  8 12:13:02 smaug php-fpm[27115]: NOTICE [Config] Configuration Change: admin@192.168.130.109 (Local Database): Firewall: Rules - disabled a firewall rule.
Apr  8 12:13:03 smaug check_reload_status[718]: Syncing firewall
Apr  8 12:13:07 smaug check_reload_status[718]: Reloading filter
Apr  8 12:13:08 smaug xinetd[81725]: Starting reconfiguration
Apr  8 12:13:08 smaug xinetd[81725]: Swapping defaults
Apr  8 12:13:08 smaug xinetd[81725]: readjusting service 19000-tcp
Apr  8 12:13:08 smaug xinetd[81725]: readjusting service 19001-tcp
Apr  8 12:13:08 smaug xinetd[81725]: readjusting service 19002-tcp
Apr  8 12:13:08 smaug xinetd[81725]: readjusting service 19003-tcp
Apr  8 12:13:08 smaug xinetd[81725]: readjusting service 19004-tcp
Apr  8 12:13:08 smaug xinetd[81725]: readjusting service 19005-tcp
Apr  8 12:13:08 smaug xinetd[81725]: readjusting service 19006-tcp
Apr  8 12:13:08 smaug xinetd[81725]: Reconfigured: new=0 old=7 dropped=0 (services)
Apr  8 12:35:18 smaug php-fpm[70818]: NOTICE [OpenVPN] user 'gropp' authenticated
Apr  8 13:08:23 smaug sshd-session[7885]: Connection closed by 192.168.129.1 port 50662
Apr  8 13:08:24 smaug sshd-session[10101]: Connection closed by 192.168.129.1 port 34705
Apr  8 13:09:44 smaug sshd-session[51783]: Connection closed by 192.168.3.254 port 15417
Apr  8 13:09:44 smaug sshd-session[51914]: Connection closed by 192.168.3.254 port 18856
Apr  8 13:10:13 smaug sshd-session[35031]: Connection closed by 192.168.254.250 port 43080
Apr  8 13:10:13 smaug sshd-session[35257]: Connection closed by 192.168.254.250 port 57003
Apr  8 13:10:25 smaug sshd-session[78212]: Connection closed by 192.168.1.200 port 50002
Apr  8 13:10:25 smaug sshd-session[78425]: Connection closed by 192.168.1.200 port 21619
Apr  8 13:10:34 smaug sshd-session[54344]: Connection closed by 193.97.129.89 port 52914
Apr  8 13:10:34 smaug sshd-session[54999]: Connection closed by 193.97.129.89 port 48142
Apr  8 13:10:43 smaug sshd-session[81011]: Connection closed by 192.168.2.254 port 61772
Apr  8 13:10:43 smaug sshd-session[81212]: Connection closed by 192.168.2.254 port 6872
Apr  8 13:16:09 smaug nginx: 2026/04/08 13:16:09 [error] 11627#100939: *16808 upstream timed out (60: Operation timed out) while reading response header from upstream, client: 192.168.138.164, server: , request: "GET /status.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php-fpm.socket", host: "smaug.sf.com"
