Сообщения oleg-m

VLC на debian не стартует в режиме mosaic

Доброго дня по всем примерам мой mosaic.vlm:

new channel1 broadcast enabled
setup channel1 input "rtsp://***:***@***:554/ISAPI/Streaming/Channels/101"
setup channel1 output #duplicate{dst=mosaic-bridge{id=1,width=960,height=540},select=video,dst=bridge-out{id=11}}

new channel2 broadcast enabled
setup channel2 input "rtsp://***:***@***:554/ISAPI/Streaming/Channels/101"
setup channel2 output #duplicate{dst=mosaic-bridge{id=2,width=960,height=540},select=video,dst=bridge-out{id=12}}

new channel3 broadcast enabled
setup channel3 input "rtsp://***:***@***:554/ISAPI/Streaming/Channels/101"
setup channel3 output #duplicate{dst=mosaic-bridge{id=3,width=960,height=540},select=video,dst=bridge-out{id=13}}

new channel4 broadcast enabled
setup channel4 input "rtsp://***:***@***:554/ISAPI/Streaming/Channels/101"
setup channel4 output #duplicate{dst=mosaic-bridge{id=4,width=960,height=540},select=video,dst=bridge-out{id=14}}

new mosaic broadcast enabled
setup mosaic input "./bg.jpg"
setup mosaic option image-duration=-1
setup mosaic output #transcode{sfilter=mosaic{width=1920,height=1080,cols=2,rows=2,order="1,2,3,4",keep-aspect-ratio=enabled,keep-picture=1,mosaic-align=5},vcodec=mp4v}:bridge-in:rtp{mux=ts,dst=10.10.5.1,port=5010,sap,name=testing}

control mosaic play
control channel1 play
control channel2 play
control channel3 play
control channel4 play

запускаю просто:

vlc --vlm-conf=mosaic.vlm

и получаю следующее:

root@:/usr/bin# vlc --vlm-conf=mosaic.vlm
VLC media player 3.0.17.4 Vetinari (revision 3.0.13-8-g41878ff4f2)
[0000557f7f730840] vlcpulse audio output error: PulseAudio server connection failure: Connection refused
[0000557f7f7571d0] main interface error: no suitable interface module
[0000557f7f65b460] main libvlc error: interface "globalhotkeys,none" initialization failed
[0000557f7f65b460] main libvlc: Running vlc with the default interface. Use 'cvlc' to use vlc without interface.
[0000557f7f7571d0] skins2 interface error: cannot initialize OSFactory
[0000557f7f6ef6e0] main playlist: playlist is empty
[0000557f7f7571d0] [cli] lua interface: Listening on host "*console".
VLC media player 3.0.17.4 Vetinari
Command Line Interface initialized. Type `help' for help.
> ^C[0000557f7f7571d0] [cli] lua interface error: Error loading script /usr/lib/x86_64-linux-gnu/vlc/lua/intf/cli.luac: lua/intf/modules/host.lua:289: Interrupted.
root@:/usr/bin#

спасибо за наводки

debian, rtsp, vlc

oleg-m
(30.10.22 09:59:31 MSK)

4 комментария

debian l2tp клиент не коннектится

Доброго дня. Бьюсь с l2tp, перелопатил кучу гайдов и уперся в такую ошибку:

Oct 24 12:54:19  pppd[218903]: In file /etc/ppp/options.l2tpd.client: unrecognized option 'crtscts'
Oct 24 12:54:19 : child_handler : pppd exited for call 2092 with code 2
Oct 24 12:54:19 : call_close: Call 44789 to *** disconnected
Oct 24 12:54:19 : result_code_avp: avp is incorrect size.  8 < 10
Oct 24 12:54:19 : handle_avps: Bad exit status handling attribute 1 (Result Code) on mandatory packet.
Oct 24 12:54:19 : Terminating pppd: sending TERM signal to pid 218903
Oct 24 12:54:19 : Connection 2109 closed to ***, port 1701 (Result Code: expected at least 10, got 8)
Oct 24 12:54:19 : check_control: Received out of order control packet on tunnel -1 (got 3, expected 0)
Oct 24 12:54:19 : handle_packet: bad control packet!
Oct 24 12:54:20 : check_control: Received out of order control packet on tunnel -1 (got 3, expected 0)
Oct 24 12:54:20 : handle_packet: bad control packet!
Oct 24 12:54:22 : check_control: Received out of order control packet on tunnel -1 (got 3, expected 0)
Oct 24 12:54:22 : handle_packet: bad control packet!
Oct 24 12:54:26 : check_control: Received out of order control packet on tunnel -1 (got 3, expected 0)
Oct 24 12:54:26 : handle_packet: bad control packet!
Oct 24 12:54:31 : Calling on tunnel 13998
Oct 24 12:54:31 : result_code_avp: avp is incorrect size.  8 < 10
Oct 24 12:54:31 : handle_avps: Bad exit status handling attribute 1 (Result Code) on mandatory packet.
Oct 24 12:54:31 : Connection -1 closed to ***, port 1701 (Result Code: expected at least 10, got 8)
Oct 24 12:54:32 : result_code_avp: avp is incorrect size.  8 < 10
Oct 24 12:54:32 : handle_avps: Bad exit status handling attribute 1 (Result Code) on mandatory packet.
Oct 24 12:54:32 : Connection -1 closed to ***, port 1701 (Result Code: expected at least 10, got 8)
Oct 24 12:54:34 : result_code_avp: avp is incorrect size.  8 < 10
Oct 24 12:54:34 : handle_avps: Bad exit status handling attribute 1 (Result Code) on mandatory packet.
Oct 24 12:54:34 : Connection -1 closed to ***, port 1701 (Result Code: expected at least 10, got 8)
Oct 24 12:54:34 : check_control: Received out of order control packet on tunnel -1 (got 3, expected 0)
Oct 24 12:54:34 : handle_packet: bad control packet!
Oct 24 12:54:38 : result_code_avp: avp is incorrect size.  8 < 10
Oct 24 12:54:38 : handle_avps: Bad exit status handling attribute 1 (Result Code) on mandatory packet.
Oct 24 12:54:38 : Connection -1 closed to ***, port 1701 (Result Code: expected at least 10, got 8)
Oct 24 12:54:39 : Session 'MY-L2TP' already active!
Oct 24 12:54:46 : result_code_avp: avp is incorrect size.  8 < 10
Oct 24 12:54:46 : handle_avps: Bad exit status handling attribute 1 (Result Code) on mandatory packet.
Oct 24 12:54:46 : Connection -1 closed to ***, port 1701 (Result Code: expected at least 10, got 8)
Oct 24 12:54:47  systemd[1]: Started Session 15381 of user root.

/etc/xl2tpd/xl2tpd.conf

[global]
access control = yes
port = 1701
auth file = /etc/ppp/chap-secrets
rand source = dev

[lac l2tp_client]
lns = ***
autodial = yes
redial = yes
redial timeout = 10
ppp debug = yes
pppoptfile = /etc/ppp/options.l2tpd.client
length bit = yes

[lac MY-L2TP]
lns = ***
require chap = yes
refuse pap = yes
require authentication = yes
name = ***
ppp debug = yes
pppoptfile = /etc/ppp/options.l2tpd.client
length bit = yes

/etc/ppp/options.l2tpd.client

ipcp-accept-local
ipcp-accept-remote
refuse-eap
require-chap
noccp
noauth
crtscts
idle 1800
mtu 1410
mru 1410
nodefaultroute
debug
lock
#proxyarp
connect-delay 5000
name ***
password ***
remotename MY-L2TP
ipparam MY-L2TP

На что обратить внимание? Спасибо

debian, l2tp, vpn

oleg-m
(24.10.22 13:05:46 MSK)

2 комментария

cron не выполняет команду

Доброго дня, что не так в задании крона (вторую строку отрабатывает, первая строка не выполняется и в логах о ней пусто) :

0 7 * * * export DISPLAY=:0 && xrandr --output HDMI-1 --brightness 1 >/dev/null 2>&1
0 23 * * * export DISPLAY=:0 && xrandr --output HDMI-1 --brightness 0.4 >/dev/null 2>&1

Спасибо

cron, crontab, debian

oleg-m
(09.09.22 13:08:14 MSK)

20 комментариев

Debian и pptp туннель

Добрый день. xl2tpd не поднимает туннель и не создаётся интерфейс для туннеля

вот логи:

root@ruvds-wxkj6:~# ifconfig -s Iface MTU RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg eth0 1500 9200 0 0 0 6240 0 0 0 BMRU lo 65536 12 0 0 0 12 0 0 0 LRU

root@ruvds-wxkj6:~# service xl2tpd status

xl2tpd.service - LSB: layer 2 tunelling protocol daemon Loaded: loaded (/etc/init.d/xl2tpd; generated) Active: active (running) since Sat 2022-07-16 09:24:24 MSK; 1h 23min ago Docs: man:systemd-sysv-generator(8) Process: 2584 ExecStart=/etc/init.d/xl2tpd start (code=exited, status=0/SUC> Tasks: 1 (limit: 432) Memory: 268.0K CPU: 8ms CGroup: /system.slice/xl2tpd.service `-2588 /usr/sbin/xl2tpd

Jul 16 09:24:24 ruvds-wxkj6 xl2tpd[2588]: xl2tpd version xl2tpd-1.3.12 started > Jul 16 09:24:24 ruvds-wxkj6 xl2tpd[2588]: Written by Mark Spencer, Copyright (C> Jul 16 09:24:24 ruvds-wxkj6 xl2tpd[2588]: Forked by Scott Balmos and David Stip> Jul 16 09:24:24 ruvds-wxkj6 xl2tpd[2588]: Inherited by Jeff McAdams, (C) 2002 Jul 16 09:24:24 ruvds-wxkj6 xl2tpd[2588]: Forked again by Xelerance (www.xelera> Jul 16 09:24:24 ruvds-wxkj6 xl2tpd[2588]: Listening on IP address 0.0.0.0, port> Jul 16 09:24:39 ruvds-wxkj6 xl2tpd[2588]: Connecting to host ***.***.ru, port> Jul 16 09:25:10 ruvds-wxkj6 xl2tpd[2588]: Maximum retries exceeded for tunnel 5> Jul 16 09:25:10 ruvds-wxkj6 xl2tpd[2588]: Connection 0 closed to 84.201.157.25,> Jul 16 09:25:41 ruvds-wxkj6 xl2tpd[2588]: Unable to deliver closing message for> lines 1-21/21 (END)

и фрагмент из syslog:

Jul 16 08:49:34 ruvds-wxkj6 xl2tpd[1842]: Connecting to host ***.***.ru, port 1701 Jul 16 08:49:37 ruvds-wxkj6 charon: 11[IKE] sending retransmit 3 of request message ID 4035287365, seq 4 Jul 16 08:49:37 ruvds-wxkj6 charon: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes) Jul 16 08:50:01 ruvds-wxkj6 charon: 13[IKE] sending retransmit 4 of request message ID 4035287365, seq 4 Jul 16 08:50:01 ruvds-wxkj6 charon: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes) Jul 16 08:50:01 ruvds-wxkj6 CRON[1889]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1) Jul 16 08:50:01 ruvds-wxkj6 CRON[1888]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1) Jul 16 08:50:01 ruvds-wxkj6 CRON[1890]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1) Jul 16 08:50:01 ruvds-wxkj6 CRON[1891]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1) Jul 16 08:50:01 ruvds-wxkj6 CRON[1892]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1) Jul 16 08:50:01 ruvds-wxkj6 CRON[1893]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1) Jul 16 08:50:01 ruvds-wxkj6 CRON[1895]: (root) CMD ( /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log 2>&1) Jul 16 08:50:01 ruvds-wxkj6 CRON[1900]: (root) CMD ( /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php >> /usr/local/mgr5/var/raisp_data/log/email.log 2>&1) Jul 16 08:50:01 ruvds-wxkj6 CRON[1911]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh) Jul 16 08:50:05 ruvds-wxkj6 xl2tpd[1842]: Maximum retries exceeded for tunnel 48680. Closing. Jul 16 08:50:05 ruvds-wxkj6 xl2tpd[1842]: Connection 0 closed to 84.201.157.25, port 1701 (Timeout) Jul 16 08:50:36 ruvds-wxkj6 xl2tpd[1842]: Unable to deliver closing message for tunnel 48680. Destroying anyway.

Благодарю за подсказки

upd:

Jul 16 09:30:30 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 09:30:30 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 1541170405 processing failed
Jul 16 09:30:30 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 09:30:30 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 09:30:30 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 09:30:30 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[24] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:30:30 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[24] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:30:30 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 318687633 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 09:30:30 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:30:34 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 318687633, seq 4
Jul 16 09:30:34 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:30:41 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 318687633, seq 4
Jul 16 09:30:41 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:30:54 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 318687633, seq 4
Jul 16 09:30:54 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:31:01 ruvds-wxkj6 CRON[2722]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:31:01 ruvds-wxkj6 CRON[2721]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:31:01 ruvds-wxkj6 CRON[2723]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:31:01 ruvds-wxkj6 CRON[2724]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:31:01 ruvds-wxkj6 CRON[2722]: pam_unix(cron:session): session closed for user root
Jul 16 09:31:01 ruvds-wxkj6 CRON[2721]: pam_unix(cron:session): session closed for user root
Jul 16 09:31:18 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 4 of request message ID 318687633, seq 4
Jul 16 09:31:18 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:32:00 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 318687633, seq 4
Jul 16 09:32:00 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:32:01 ruvds-wxkj6 CRON[2728]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:32:01 ruvds-wxkj6 CRON[2727]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:32:01 ruvds-wxkj6 CRON[2729]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:32:01 ruvds-wxkj6 CRON[2730]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:32:01 ruvds-wxkj6 CRON[2728]: pam_unix(cron:session): session closed for user root
Jul 16 09:32:01 ruvds-wxkj6 CRON[2727]: pam_unix(cron:session): session closed for user root
Jul 16 09:33:01 ruvds-wxkj6 CRON[2734]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:33:01 ruvds-wxkj6 CRON[2733]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:33:01 ruvds-wxkj6 CRON[2735]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:33:01 ruvds-wxkj6 CRON[2736]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:33:01 ruvds-wxkj6 CRON[2734]: pam_unix(cron:session): session closed for user root
Jul 16 09:33:01 ruvds-wxkj6 CRON[2733]: pam_unix(cron:session): session closed for user root
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 16[KNL] creating delete job for CHILD_SA ESP/0xcda4af3c/194.87.101.244
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 16[JOB] CHILD_SA ESP/0xcda4af3c/194.87.101.244 not found for delete
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[25] to 84.201.157.25
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[25] to 84.201.157.25
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[ENC] could not decrypt payloads
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[IKE] message parsing failed
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[IKE] ignore malformed INFORMATIONAL request
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[IKE] INFORMATIONAL_V1 request with message ID 626004248 processing failed
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[IKE] IKE_SA vpnki-l2tp[25] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[IKE] IKE_SA vpnki-l2tp[25] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[ENC] generating QUICK_MODE request 1916674316 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 09:33:15 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:33:19 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 1916674316, seq 4
Jul 16 09:33:19 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:33:27 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 2 of request message ID 1916674316, seq 4
Jul 16 09:33:27 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:33:39 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 1916674316, seq 4
Jul 16 09:33:39 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:34:01 ruvds-wxkj6 CRON[2741]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:34:01 ruvds-wxkj6 CRON[2740]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:34:01 ruvds-wxkj6 CRON[2742]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:34:01 ruvds-wxkj6 CRON[2743]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:34:01 ruvds-wxkj6 CRON[2741]: pam_unix(cron:session): session closed for user root
Jul 16 09:34:01 ruvds-wxkj6 CRON[2740]: pam_unix(cron:session): session closed for user root
Jul 16 09:34:03 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 1916674316, seq 4
Jul 16 09:34:03 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:34:45 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 5 of request message ID 1916674316, seq 4
Jul 16 09:34:45 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2752]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2754]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2749]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2748]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2750]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2753]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2751]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2757]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2758]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2759]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2760]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2755]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2761]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2756]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2747]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2749]: pam_unix(cron:session): session closed for user root
Jul 16 09:35:01 ruvds-wxkj6 CRON[2750]: pam_unix(cron:session): session closed for user root
Jul 16 09:35:01 ruvds-wxkj6 CRON[2752]: pam_unix(cron:session): session closed for user root
Jul 16 09:35:01 ruvds-wxkj6 CRON[2767]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 09:35:01 ruvds-wxkj6 CRON[2751]: pam_unix(cron:session): session closed for user root
Jul 16 09:35:01 ruvds-wxkj6 CRON[2753]: pam_unix(cron:session): session closed for user root
Jul 16 09:35:01 ruvds-wxkj6 CRON[2754]: pam_unix(cron:session): session closed for user root
Jul 16 09:35:01 ruvds-wxkj6 CRON[2748]: pam_unix(cron:session): session closed for user root
Jul 16 09:35:01 ruvds-wxkj6 CRON[2747]: pam_unix(cron:session): session closed for user root
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xc27cea74/194.87.101.244
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xc27cea74/194.87.101.244 not found for delete
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 07[IKE] giving up after 5 retransmits
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 07[IKE] initiating Main Mode IKE_SA vpnki-l2tp[26] to 84.201.157.25
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 07[IKE] initiating Main Mode IKE_SA vpnki-l2tp[26] to 84.201.157.25
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 16[IKE] received DPD vendor ID
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 16[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 16[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 1869115505 processing failed
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[26] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[26] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 3946177940 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 09:36:00 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:36:01 ruvds-wxkj6 CRON[2785]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:36:01 ruvds-wxkj6 CRON[2784]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:36:01 ruvds-wxkj6 CRON[2786]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:36:01 ruvds-wxkj6 CRON[2787]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:36:01 ruvds-wxkj6 CRON[2785]: pam_unix(cron:session): session closed for user root
Jul 16 09:36:01 ruvds-wxkj6 CRON[2784]: pam_unix(cron:session): session closed for user root
Jul 16 09:36:04 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 3946177940, seq 4
Jul 16 09:36:04 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:36:12 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 3946177940, seq 4
Jul 16 09:36:12 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:36:25 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 3946177940, seq 4
Jul 16 09:36:25 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:36:48 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 4 of request message ID 3946177940, seq 4
Jul 16 09:36:48 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:37:01 ruvds-wxkj6 CRON[2791]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:37:01 ruvds-wxkj6 CRON[2790]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:37:01 ruvds-wxkj6 CRON[2792]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:37:01 ruvds-wxkj6 CRON[2793]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:37:01 ruvds-wxkj6 CRON[2791]: pam_unix(cron:session): session closed for user root
Jul 16 09:37:01 ruvds-wxkj6 CRON[2790]: pam_unix(cron:session): session closed for user root
Jul 16 09:37:18 ruvds-wxkj6 sshd[2796]: error: kex_exchange_identification: Connection closed by remote host
Jul 16 09:37:18 ruvds-wxkj6 sshd[2796]: Connection closed by 192.53.167.115 port 61070
Jul 16 09:37:30 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 3946177940, seq 4
Jul 16 09:37:30 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:38:01 ruvds-wxkj6 CRON[2797]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:38:01 ruvds-wxkj6 CRON[2798]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:38:01 ruvds-wxkj6 CRON[2799]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:38:01 ruvds-wxkj6 CRON[2800]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:38:01 ruvds-wxkj6 CRON[2798]: pam_unix(cron:session): session closed for user root
Jul 16 09:38:01 ruvds-wxkj6 CRON[2797]: pam_unix(cron:session): session closed for user root
Jul 16 09:38:10 ruvds-wxkj6 sshd[2803]: error: kex_exchange_identification: Connection closed by remote host
Jul 16 09:38:10 ruvds-wxkj6 sshd[2803]: Connection closed by 141.98.10.157 port 44300
Jul 16 09:38:30 ruvds-wxkj6 sshd[2804]: Unable to negotiate with 141.98.10.157 port 53208: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Jul 16 09:38:45 ruvds-wxkj6 charon[1363]: 09[KNL] creating delete job for CHILD_SA ESP/0xca31b82b/194.87.101.244
Jul 16 09:38:45 ruvds-wxkj6 charon[1363]: 09[JOB] CHILD_SA ESP/0xca31b82b/194.87.101.244 not found for delete
Jul 16 09:38:45 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[27] to 84.201.157.25
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[27] to 84.201.157.25
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 3812568420 processing failed
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[27] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[27] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 1853492527 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 09:38:46 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:38:50 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 1853492527, seq 4
Jul 16 09:38:50 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:38:57 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 2 of request message ID 1853492527, seq 4
Jul 16 09:38:57 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:39:00 ruvds-wxkj6 systemd[1]: Starting Clean php session files...
Jul 16 09:39:00 ruvds-wxkj6 systemd[1]: phpsessionclean.service: Succeeded.
Jul 16 09:39:00 ruvds-wxkj6 systemd[1]: Finished Clean php session files.
Jul 16 09:39:01 ruvds-wxkj6 CRON[2887]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:39:01 ruvds-wxkj6 CRON[2886]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:39:01 ruvds-wxkj6 CRON[2885]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:39:01 ruvds-wxkj6 CRON[2888]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:39:01 ruvds-wxkj6 CRON[2889]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:39:01 ruvds-wxkj6 CRON[2890]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jul 16 09:39:01 ruvds-wxkj6 CRON[2885]: pam_unix(cron:session): session closed for user root
Jul 16 09:39:01 ruvds-wxkj6 CRON[2887]: pam_unix(cron:session): session closed for user root
Jul 16 09:39:01 ruvds-wxkj6 CRON[2886]: pam_unix(cron:session): session closed for user root
Jul 16 09:39:10 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 1853492527, seq 4
Jul 16 09:39:10 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:39:33 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 1853492527, seq 4
Jul 16 09:39:33 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2901]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2897]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2899]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2902]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2898]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2900]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2903]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2896]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2905]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2906]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2907]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2895]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2908]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2904]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2909]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2911]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2899]: pam_unix(cron:session): session closed for user root
Jul 16 09:40:03 ruvds-wxkj6 CRON[2913]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2901]: pam_unix(cron:session): session closed for user root
Jul 16 09:40:03 ruvds-wxkj6 CRON[2898]: pam_unix(cron:session): session closed for user root
Jul 16 09:40:03 ruvds-wxkj6 CRON[2900]: pam_unix(cron:session): session closed for user root
Jul 16 09:40:03 ruvds-wxkj6 CRON[2920]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 09:40:03 ruvds-wxkj6 CRON[2895]: pam_unix(cron:session): session closed for user www-data
Jul 16 09:40:03 ruvds-wxkj6 CRON[2902]: pam_unix(cron:session): session closed for user root
Jul 16 09:40:03 ruvds-wxkj6 CRON[2903]: pam_unix(cron:session): session closed for user root
Jul 16 09:40:03 ruvds-wxkj6 CRON[2896]: pam_unix(cron:session): session closed for user root
Jul 16 09:40:03 ruvds-wxkj6 CRON[2897]: pam_unix(cron:session): session closed for user root
Jul 16 09:40:15 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 1853492527, seq 4
Jul 16 09:40:15 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:41:01 ruvds-wxkj6 CRON[2941]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:41:01 ruvds-wxkj6 CRON[2940]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:41:01 ruvds-wxkj6 CRON[2942]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:41:01 ruvds-wxkj6 CRON[2943]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:41:01 ruvds-wxkj6 CRON[2941]: pam_unix(cron:session): session closed for user root
Jul 16 09:41:01 ruvds-wxkj6 CRON[2940]: pam_unix(cron:session): session closed for user root
Jul 16 09:41:05 ruvds-wxkj6 sshd[2946]: Unable to negotiate with 61.177.172.60 port 36196: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xc355b12b/194.87.101.244
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xc355b12b/194.87.101.244 not found for delete
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 10[IKE] giving up after 5 retransmits
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 10[IKE] initiating Main Mode IKE_SA vpnki-l2tp[28] to 84.201.157.25
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 10[IKE] initiating Main Mode IKE_SA vpnki-l2tp[28] to 84.201.157.25
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 09[IKE] received DPD vendor ID
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 09[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 09[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 2742127311 processing failed
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[28] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[28] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 1100255045 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 09:41:31 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:41:35 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 1100255045, seq 4
Jul 16 09:41:35 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:41:42 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 1100255045, seq 4
Jul 16 09:41:42 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:41:55 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 1100255045, seq 4
Jul 16 09:41:55 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:42:01 ruvds-wxkj6 CRON[2952]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:42:01 ruvds-wxkj6 CRON[2951]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:42:01 ruvds-wxkj6 CRON[2953]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:42:01 ruvds-wxkj6 CRON[2954]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:42:01 ruvds-wxkj6 CRON[2952]: pam_unix(cron:session): session closed for user root
Jul 16 09:42:01 ruvds-wxkj6 CRON[2951]: pam_unix(cron:session): session closed for user root
Jul 16 09:42:18 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 4 of request message ID 1100255045, seq 4
Jul 16 09:42:18 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:43:00 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 1100255045, seq 4
Jul 16 09:43:00 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:43:01 ruvds-wxkj6 CRON[2957]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:43:01 ruvds-wxkj6 CRON[2958]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:43:01 ruvds-wxkj6 CRON[2959]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:43:01 ruvds-wxkj6 CRON[2960]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:43:01 ruvds-wxkj6 CRON[2958]: pam_unix(cron:session): session closed for user root
Jul 16 09:43:01 ruvds-wxkj6 CRON[2957]: pam_unix(cron:session): session closed for user root
Jul 16 09:44:01 ruvds-wxkj6 CRON[2963]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:44:01 ruvds-wxkj6 CRON[2964]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:44:01 ruvds-wxkj6 CRON[2965]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:44:01 ruvds-wxkj6 CRON[2966]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:44:01 ruvds-wxkj6 CRON[2964]: pam_unix(cron:session): session closed for user root
Jul 16 09:44:01 ruvds-wxkj6 CRON[2963]: pam_unix(cron:session): session closed for user root
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xc94cb3bf/194.87.101.244
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xc94cb3bf/194.87.101.244 not found for delete
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[29] to 84.201.157.25
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[29] to 84.201.157.25
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[ENC] could not decrypt payloads
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[IKE] message parsing failed
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[IKE] ignore malformed INFORMATIONAL request
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[IKE] INFORMATIONAL_V1 request with message ID 1053222602 processing failed
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[IKE] IKE_SA vpnki-l2tp[29] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[IKE] IKE_SA vpnki-l2tp[29] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[ENC] generating QUICK_MODE request 2386100215 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 09:44:16 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:44:20 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 2386100215, seq 4
Jul 16 09:44:20 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:44:27 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 2 of request message ID 2386100215, seq 4
Jul 16 09:44:27 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:44:40 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 2386100215, seq 4
Jul 16 09:44:40 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2977]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2975]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2974]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2973]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2972]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2971]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2976]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2970]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2978]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2979]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2980]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2981]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2982]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2983]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2984]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2985]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr addon/srvmon >/dev/null 2>&1)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2987]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2975]: pam_unix(cron:session): session closed for user root
Jul 16 09:45:01 ruvds-wxkj6 CRON[2976]: pam_unix(cron:session): session closed for user root
Jul 16 09:45:01 ruvds-wxkj6 CRON[2974]: pam_unix(cron:session): session closed for user root
Jul 16 09:45:01 ruvds-wxkj6 CRON[2973]: pam_unix(cron:session): session closed for user root
Jul 16 09:45:01 ruvds-wxkj6 CRON[2972]: pam_unix(cron:session): session closed for user root
Jul 16 09:45:01 ruvds-wxkj6 CRON[2997]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 09:45:01 ruvds-wxkj6 CRON[2978]: pam_unix(cron:session): session closed for user root
Jul 16 09:45:01 ruvds-wxkj6 CRON[2977]: pam_unix(cron:session): session closed for user root
Jul 16 09:45:01 ruvds-wxkj6 CRON[2970]: pam_unix(cron:session): session closed for user root
Jul 16 09:45:01 ruvds-wxkj6 CRON[2971]: pam_unix(cron:session): session closed for user root
Jul 16 09:45:03 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 2386100215, seq 4
Jul 16 09:45:03 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:45:45 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 5 of request message ID 2386100215, seq 4
Jul 16 09:45:45 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:46:01 ruvds-wxkj6 CRON[3010]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:46:01 ruvds-wxkj6 CRON[3011]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:46:01 ruvds-wxkj6 CRON[3012]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:46:01 ruvds-wxkj6 CRON[3013]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:46:01 ruvds-wxkj6 CRON[3011]: pam_unix(cron:session): session closed for user root
Jul 16 09:46:01 ruvds-wxkj6 CRON[3010]: pam_unix(cron:session): session closed for user root
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xc838870b/194.87.101.244
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xc838870b/194.87.101.244 not found for delete
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 16[IKE] giving up after 5 retransmits
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[30] to 84.201.157.25
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[30] to 84.201.157.25
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 07[IKE] received DPD vendor ID
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 07[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 07[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 3794285169 processing failed
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[30] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[30] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 3749449660 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 09:47:01 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:47:01 ruvds-wxkj6 CRON[3018]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:47:01 ruvds-wxkj6 CRON[3017]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:47:01 ruvds-wxkj6 CRON[3019]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:47:01 ruvds-wxkj6 CRON[3020]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:47:01 ruvds-wxkj6 CRON[3018]: pam_unix(cron:session): session closed for user root
Jul 16 09:47:01 ruvds-wxkj6 CRON[3017]: pam_unix(cron:session): session closed for user root
Jul 16 09:47:05 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 3749449660, seq 4
Jul 16 09:47:05 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:47:12 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 3749449660, seq 4
Jul 16 09:47:12 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:47:25 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 3749449660, seq 4
Jul 16 09:47:25 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:47:48 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 3749449660, seq 4
Jul 16 09:47:48 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:48:01 ruvds-wxkj6 CRON[3024]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:48:01 ruvds-wxkj6 CRON[3023]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:48:01 ruvds-wxkj6 CRON[3025]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:48:01 ruvds-wxkj6 CRON[3026]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:48:01 ruvds-wxkj6 CRON[3024]: pam_unix(cron:session): session closed for user root
Jul 16 09:48:01 ruvds-wxkj6 CRON[3023]: pam_unix(cron:session): session closed for user root
Jul 16 09:48:30 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 3749449660, seq 4
Jul 16 09:48:30 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:49:02 ruvds-wxkj6 CRON[3030]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:49:02 ruvds-wxkj6 CRON[3031]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:49:02 ruvds-wxkj6 CRON[3032]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:49:02 ruvds-wxkj6 CRON[3033]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:49:02 ruvds-wxkj6 CRON[3031]: pam_unix(cron:session): session closed for user root
Jul 16 09:49:02 ruvds-wxkj6 CRON[3030]: pam_unix(cron:session): session closed for user root
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 09[KNL] creating delete job for CHILD_SA ESP/0xc582d19c/194.87.101.244
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 09[JOB] CHILD_SA ESP/0xc582d19c/194.87.101.244 not found for delete
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[31] to 84.201.157.25
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[31] to 84.201.157.25
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 1617727818 processing failed
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[31] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[31] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 3854844136 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 09:49:46 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:49:50 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 3854844136, seq 4
Jul 16 09:49:50 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:49:57 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 2 of request message ID 3854844136, seq 4
Jul 16 09:49:57 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3044]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3038]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3042]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3045]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3041]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3046]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3040]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3039]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3037]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3047]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3048]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3050]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3051]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3053]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3041]: pam_unix(cron:session): session closed for user root
Jul 16 09:50:01 ruvds-wxkj6 CRON[3052]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3055]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3042]: pam_unix(cron:session): session closed for user root
Jul 16 09:50:01 ruvds-wxkj6 CRON[3040]: pam_unix(cron:session): session closed for user root
Jul 16 09:50:01 ruvds-wxkj6 CRON[3043]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3066]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:50:01 ruvds-wxkj6 CRON[3043]: pam_unix(cron:session): session closed for user root
Jul 16 09:50:01 ruvds-wxkj6 CRON[3037]: pam_unix(cron:session): session closed for user www-data
Jul 16 09:50:01 ruvds-wxkj6 CRON[3044]: pam_unix(cron:session): session closed for user root
Jul 16 09:50:01 ruvds-wxkj6 CRON[3045]: pam_unix(cron:session): session closed for user root
Jul 16 09:50:01 ruvds-wxkj6 CRON[3039]: pam_unix(cron:session): session closed for user root
Jul 16 09:50:01 ruvds-wxkj6 CRON[3038]: pam_unix(cron:session): session closed for user root
Jul 16 09:50:10 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 3854844136, seq 4
Jul 16 09:50:10 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:50:34 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 3854844136, seq 4
Jul 16 09:50:34 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:51:01 ruvds-wxkj6 CRON[3083]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:51:01 ruvds-wxkj6 CRON[3084]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:51:01 ruvds-wxkj6 CRON[3085]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:51:01 ruvds-wxkj6 CRON[3086]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:51:01 ruvds-wxkj6 CRON[3084]: pam_unix(cron:session): session closed for user root
Jul 16 09:51:01 ruvds-wxkj6 CRON[3083]: pam_unix(cron:session): session closed for user root
Jul 16 09:51:16 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 3854844136, seq 4
Jul 16 09:51:16 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:52:01 ruvds-wxkj6 CRON[3090]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:52:01 ruvds-wxkj6 CRON[3089]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:52:01 ruvds-wxkj6 CRON[3091]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:52:01 ruvds-wxkj6 CRON[3092]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:52:01 ruvds-wxkj6 CRON[3090]: pam_unix(cron:session): session closed for user root
Jul 16 09:52:01 ruvds-wxkj6 CRON[3089]: pam_unix(cron:session): session closed for user root
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xcff1f6df/194.87.101.244
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xcff1f6df/194.87.101.244 not found for delete
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 10[IKE] giving up after 5 retransmits
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 10[IKE] initiating Main Mode IKE_SA vpnki-l2tp[32] to 84.201.157.25
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 10[IKE] initiating Main Mode IKE_SA vpnki-l2tp[32] to 84.201.157.25
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 09[IKE] received DPD vendor ID
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 09[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 09[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 976930234 processing failed
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[32] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[32] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 3907060386 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 09:52:31 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:52:35 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 3907060386, seq 4
Jul 16 09:52:35 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:52:42 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 3907060386, seq 4
Jul 16 09:52:42 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:52:55 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 3907060386, seq 4
Jul 16 09:52:55 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:53:01 ruvds-wxkj6 CRON[3097]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:53:01 ruvds-wxkj6 CRON[3098]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:53:01 ruvds-wxkj6 CRON[3099]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:53:01 ruvds-wxkj6 CRON[3100]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:53:01 ruvds-wxkj6 CRON[3098]: pam_unix(cron:session): session closed for user root
Jul 16 09:53:01 ruvds-wxkj6 CRON[3097]: pam_unix(cron:session): session closed for user root
Jul 16 09:53:19 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 4 of request message ID 3907060386, seq 4
Jul 16 09:53:19 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:54:01 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 3907060386, seq 4
Jul 16 09:54:01 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:54:01 ruvds-wxkj6 CRON[3104]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:54:01 ruvds-wxkj6 CRON[3103]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:54:01 ruvds-wxkj6 CRON[3105]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:54:01 ruvds-wxkj6 CRON[3106]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:54:01 ruvds-wxkj6 CRON[3104]: pam_unix(cron:session): session closed for user root
Jul 16 09:54:01 ruvds-wxkj6 CRON[3103]: pam_unix(cron:session): session closed for user root
Jul 16 09:55:01 ruvds-wxkj6 CRON[3116]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3115]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3113]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3112]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3110]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3114]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3117]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3118]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3119]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3111]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3120]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3121]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3122]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3125]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3113]: pam_unix(cron:session): session closed for user root
Jul 16 09:55:01 ruvds-wxkj6 CRON[3124]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3115]: pam_unix(cron:session): session closed for user root
Jul 16 09:55:01 ruvds-wxkj6 CRON[3114]: pam_unix(cron:session): session closed for user root
Jul 16 09:55:01 ruvds-wxkj6 CRON[3112]: pam_unix(cron:session): session closed for user root
Jul 16 09:55:01 ruvds-wxkj6 CRON[3133]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 09:55:01 ruvds-wxkj6 CRON[3117]: pam_unix(cron:session): session closed for user root
Jul 16 09:55:01 ruvds-wxkj6 CRON[3116]: pam_unix(cron:session): session closed for user root
Jul 16 09:55:01 ruvds-wxkj6 CRON[3111]: pam_unix(cron:session): session closed for user root
Jul 16 09:55:01 ruvds-wxkj6 CRON[3110]: pam_unix(cron:session): session closed for user root
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xc739d0e0/194.87.101.244
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xc739d0e0/194.87.101.244 not found for delete
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[33] to 84.201.157.25
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[33] to 84.201.157.25
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[ENC] could not decrypt payloads
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[IKE] message parsing failed
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[IKE] ignore malformed INFORMATIONAL request
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[IKE] INFORMATIONAL_V1 request with message ID 2621954488 processing failed
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[IKE] IKE_SA vpnki-l2tp[33] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[IKE] IKE_SA vpnki-l2tp[33] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[ENC] generating QUICK_MODE request 443104013 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 09:55:16 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:55:20 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 443104013, seq 4
Jul 16 09:55:20 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:55:27 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 2 of request message ID 443104013, seq 4
Jul 16 09:55:28 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:55:40 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 443104013, seq 4
Jul 16 09:55:40 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:56:01 ruvds-wxkj6 CRON[3149]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:56:01 ruvds-wxkj6 CRON[3148]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:56:01 ruvds-wxkj6 CRON[3150]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:56:01 ruvds-wxkj6 CRON[3151]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:56:01 ruvds-wxkj6 CRON[3149]: pam_unix(cron:session): session closed for user root
Jul 16 09:56:01 ruvds-wxkj6 CRON[3148]: pam_unix(cron:session): session closed for user root
Jul 16 09:56:04 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 443104013, seq 4
Jul 16 09:56:04 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:56:46 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 443104013, seq 4
Jul 16 09:56:46 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:57:01 ruvds-wxkj6 CRON[3155]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:57:01 ruvds-wxkj6 CRON[3154]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:57:01 ruvds-wxkj6 CRON[3156]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:57:01 ruvds-wxkj6 CRON[3157]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:57:01 ruvds-wxkj6 CRON[3155]: pam_unix(cron:session): session closed for user root
Jul 16 09:57:01 ruvds-wxkj6 CRON[3154]: pam_unix(cron:session): session closed for user root
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xc3b4d359/194.87.101.244
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xc3b4d359/194.87.101.244 not found for delete
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 16[IKE] giving up after 5 retransmits
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[34] to 84.201.157.25
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[34] to 84.201.157.25
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 09:58:01 ruvds-wxkj6 CRON[3161]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:58:01 ruvds-wxkj6 CRON[3162]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:58:01 ruvds-wxkj6 CRON[3163]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:58:01 ruvds-wxkj6 CRON[3164]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:58:01 ruvds-wxkj6 CRON[3162]: pam_unix(cron:session): session closed for user root
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 07[IKE] received DPD vendor ID
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 07[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 07[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 09:58:01 ruvds-wxkj6 CRON[3161]: pam_unix(cron:session): session closed for user root
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 3698829968 processing failed
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[34] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[34] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 934526568 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 09:58:01 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:58:05 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 934526568, seq 4
Jul 16 09:58:05 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:58:13 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 934526568, seq 4
Jul 16 09:58:13 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:58:26 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 934526568, seq 4
Jul 16 09:58:26 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:58:49 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 934526568, seq 4
Jul 16 09:58:49 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 09:59:01 ruvds-wxkj6 CRON[3168]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:59:01 ruvds-wxkj6 CRON[3167]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 09:59:01 ruvds-wxkj6 CRON[3169]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 09:59:01 ruvds-wxkj6 CRON[3170]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 09:59:01 ruvds-wxkj6 CRON[3168]: pam_unix(cron:session): session closed for user root
Jul 16 09:59:01 ruvds-wxkj6 CRON[3167]: pam_unix(cron:session): session closed for user root
Jul 16 09:59:31 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 934526568, seq 4
Jul 16 09:59:31 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:00:01 ruvds-wxkj6 CRON[3179]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:00:01 ruvds-wxkj6 CRON[3180]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3182]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3176]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3175]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3183]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3174]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3178]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3181]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3177]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3184]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3185]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3186]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3187]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr addon/srvmon >/dev/null 2>&1)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3188]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3189]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3190]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3191]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3178]: pam_unix(cron:session): session closed for user root
Jul 16 10:00:02 ruvds-wxkj6 CRON[3173]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3181]: pam_unix(cron:session): session closed for user root
Jul 16 10:00:02 ruvds-wxkj6 CRON[3194]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/scheduler.php    >> /usr/local/mgr5/var/raisp_data/log/raisp_scheduler.log   2>&1)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3197]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3177]: pam_unix(cron:session): session closed for user root
Jul 16 10:00:02 ruvds-wxkj6 CRON[3180]: pam_unix(cron:session): session closed for user root
Jul 16 10:00:02 ruvds-wxkj6 CRON[3179]: pam_unix(cron:session): session closed for user root
Jul 16 10:00:02 ruvds-wxkj6 CRON[3206]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 10:00:02 ruvds-wxkj6 CRON[3173]: pam_unix(cron:session): session closed for user www-data
Jul 16 10:00:02 ruvds-wxkj6 CRON[3182]: pam_unix(cron:session): session closed for user root
Jul 16 10:00:02 ruvds-wxkj6 CRON[3183]: pam_unix(cron:session): session closed for user root
Jul 16 10:00:02 ruvds-wxkj6 CRON[3174]: pam_unix(cron:session): session closed for user root
Jul 16 10:00:02 ruvds-wxkj6 CRON[3176]: pam_unix(cron:session): session closed for user root
Jul 16 10:00:02 ruvds-wxkj6 CRON[3175]: pam_unix(cron:session): session closed for user root
Jul 16 10:00:46 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xc3fe26fc/194.87.101.244
Jul 16 10:00:46 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xc3fe26fc/194.87.101.244 not found for delete
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[35] to 84.201.157.25
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[35] to 84.201.157.25
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[35] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[35] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 2159011149 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 07[ENC] parsed INFORMATIONAL_V1 request 2416019227 [ HASH D ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 07[IKE] received DELETE for IKE_SA vpnki-l2tp[35]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 07[IKE] deleting IKE_SA vpnki-l2tp[35] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 07[IKE] deleting IKE_SA vpnki-l2tp[35] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 07[IKE] initiating Main Mode IKE_SA vpnki-l2tp[36] to 84.201.157.25
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 07[IKE] initiating Main Mode IKE_SA vpnki-l2tp[36] to 84.201.157.25
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 15[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 15[IKE] received DPD vendor ID
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 15[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 15[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 06[IKE] remote host is behind NAT
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[ENC] could not decrypt payloads
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[IKE] message parsing failed
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[IKE] INFORMATIONAL_V1 request with message ID 2698384260 processing failed
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[IKE] IKE_SA vpnki-l2tp[36] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[IKE] IKE_SA vpnki-l2tp[36] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[ENC] generating QUICK_MODE request 2340519887 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:00:47 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:00:51 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 1 of request message ID 2340519887, seq 4
Jul 16 10:00:51 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:00:58 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 2 of request message ID 2340519887, seq 4
Jul 16 10:00:58 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:01:01 ruvds-wxkj6 CRON[3229]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:01:01 ruvds-wxkj6 CRON[3228]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:01:01 ruvds-wxkj6 CRON[3230]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:01:01 ruvds-wxkj6 CRON[3231]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:01:01 ruvds-wxkj6 CRON[3229]: pam_unix(cron:session): session closed for user root
Jul 16 10:01:01 ruvds-wxkj6 CRON[3228]: pam_unix(cron:session): session closed for user root
Jul 16 10:01:11 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 3 of request message ID 2340519887, seq 4
Jul 16 10:01:11 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:01:34 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 2340519887, seq 4
Jul 16 10:01:34 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:02:01 ruvds-wxkj6 CRON[3236]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:02:01 ruvds-wxkj6 CRON[3235]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:02:01 ruvds-wxkj6 CRON[3237]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:02:01 ruvds-wxkj6 CRON[3238]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:02:01 ruvds-wxkj6 CRON[3236]: pam_unix(cron:session): session closed for user root
Jul 16 10:02:01 ruvds-wxkj6 CRON[3235]: pam_unix(cron:session): session closed for user root
Jul 16 10:02:16 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 2340519887, seq 4
Jul 16 10:02:16 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:03:01 ruvds-wxkj6 CRON[3242]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:03:01 ruvds-wxkj6 CRON[3241]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:03:01 ruvds-wxkj6 CRON[3243]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:03:01 ruvds-wxkj6 CRON[3244]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:03:01 ruvds-wxkj6 CRON[3242]: pam_unix(cron:session): session closed for user root
Jul 16 10:03:01 ruvds-wxkj6 CRON[3241]: pam_unix(cron:session): session closed for user root
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xc45acc5c/194.87.101.244
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xc45acc5c/194.87.101.244 not found for delete
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[37] to 84.201.157.25
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[37] to 84.201.157.25
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[37] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[37] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 593543494 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 10[ENC] parsed INFORMATIONAL_V1 request 2421203156 [ HASH D ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 10[IKE] received DELETE for IKE_SA vpnki-l2tp[37]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 10[IKE] deleting IKE_SA vpnki-l2tp[37] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 10[IKE] deleting IKE_SA vpnki-l2tp[37] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 10[IKE] initiating Main Mode IKE_SA vpnki-l2tp[38] to 84.201.157.25
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 10[IKE] initiating Main Mode IKE_SA vpnki-l2tp[38] to 84.201.157.25
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 11[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 11[IKE] received DPD vendor ID
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 11[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 11[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 12[IKE] remote host is behind NAT
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[ENC] could not decrypt payloads
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[IKE] message parsing failed
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[IKE] INFORMATIONAL_V1 request with message ID 2524665611 processing failed
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[IKE] IKE_SA vpnki-l2tp[38] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[IKE] IKE_SA vpnki-l2tp[38] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[ENC] generating QUICK_MODE request 1654282949 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:03:32 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:03:36 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 1 of request message ID 1654282949, seq 4
Jul 16 10:03:36 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:03:43 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 2 of request message ID 1654282949, seq 4
Jul 16 10:03:43 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:03:56 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 3 of request message ID 1654282949, seq 4
Jul 16 10:03:56 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:04:01 ruvds-wxkj6 CRON[3248]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:04:01 ruvds-wxkj6 CRON[3249]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:04:01 ruvds-wxkj6 CRON[3250]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:04:01 ruvds-wxkj6 CRON[3251]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:04:01 ruvds-wxkj6 CRON[3249]: pam_unix(cron:session): session closed for user root
Jul 16 10:04:01 ruvds-wxkj6 CRON[3248]: pam_unix(cron:session): session closed for user root
Jul 16 10:04:19 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 1654282949, seq 4
Jul 16 10:04:19 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3260]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3258]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3256]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3261]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3257]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3255]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3259]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3262]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3263]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3264]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3265]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3266]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3254]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3259]: pam_unix(cron:session): session closed for user root
Jul 16 10:05:01 ruvds-wxkj6 CRON[3269]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3270]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3258]: pam_unix(cron:session): session closed for user root
Jul 16 10:05:01 ruvds-wxkj6 CRON[3256]: pam_unix(cron:session): session closed for user root
Jul 16 10:05:01 ruvds-wxkj6 CRON[3272]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:05:01 ruvds-wxkj6 CRON[3257]: pam_unix(cron:session): session closed for user root
Jul 16 10:05:01 ruvds-wxkj6 CRON[3261]: pam_unix(cron:session): session closed for user root
Jul 16 10:05:01 ruvds-wxkj6 CRON[3260]: pam_unix(cron:session): session closed for user root
Jul 16 10:05:01 ruvds-wxkj6 CRON[3254]: pam_unix(cron:session): session closed for user root
Jul 16 10:05:01 ruvds-wxkj6 CRON[3255]: pam_unix(cron:session): session closed for user root
Jul 16 10:05:01 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 1654282949, seq 4
Jul 16 10:05:01 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:05:15 ruvds-wxkj6 sshd[3290]: error: kex_exchange_identification: Connection closed by remote host
Jul 16 10:05:15 ruvds-wxkj6 sshd[3290]: Connection closed by 141.98.10.157 port 37120
Jul 16 10:05:33 ruvds-wxkj6 sshd[3291]: Unable to negotiate with 141.98.10.157 port 47258: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Jul 16 10:06:01 ruvds-wxkj6 CRON[3295]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:06:01 ruvds-wxkj6 CRON[3294]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:06:01 ruvds-wxkj6 CRON[3296]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:06:01 ruvds-wxkj6 CRON[3297]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:06:01 ruvds-wxkj6 CRON[3295]: pam_unix(cron:session): session closed for user root
Jul 16 10:06:01 ruvds-wxkj6 CRON[3294]: pam_unix(cron:session): session closed for user root
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xcecd416a/194.87.101.244
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xcecd416a/194.87.101.244 not found for delete
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[39] to 84.201.157.25
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[39] to 84.201.157.25
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 2135628871 processing failed
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[39] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[39] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 2337807935 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:06:17 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:06:21 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 2337807935, seq 4
Jul 16 10:06:21 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:06:28 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 2337807935, seq 4
Jul 16 10:06:28 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:06:41 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 2337807935, seq 4
Jul 16 10:06:41 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:07:01 ruvds-wxkj6 CRON[3305]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:07:01 ruvds-wxkj6 CRON[3306]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:07:01 ruvds-wxkj6 CRON[3307]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:07:01 ruvds-wxkj6 CRON[3308]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:07:01 ruvds-wxkj6 CRON[3306]: pam_unix(cron:session): session closed for user root
Jul 16 10:07:01 ruvds-wxkj6 CRON[3305]: pam_unix(cron:session): session closed for user root
Jul 16 10:07:04 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 2337807935, seq 4
Jul 16 10:07:04 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:07:46 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 2337807935, seq 4
Jul 16 10:07:46 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:08:01 ruvds-wxkj6 CRON[3312]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:08:01 ruvds-wxkj6 CRON[3311]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:08:01 ruvds-wxkj6 CRON[3313]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:08:01 ruvds-wxkj6 CRON[3314]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:08:01 ruvds-wxkj6 CRON[3312]: pam_unix(cron:session): session closed for user root
Jul 16 10:08:01 ruvds-wxkj6 CRON[3311]: pam_unix(cron:session): session closed for user root
Jul 16 10:08:22 ruvds-wxkj6 sshd[3317]: Unable to negotiate with 61.177.173.56 port 51828: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Jul 16 10:09:00 ruvds-wxkj6 systemd[1]: Starting Clean php session files...
Jul 16 10:09:00 ruvds-wxkj6 systemd[1]: phpsessionclean.service: Succeeded.
Jul 16 10:09:00 ruvds-wxkj6 systemd[1]: Finished Clean php session files.
Jul 16 10:09:01 ruvds-wxkj6 CRON[3399]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:09:01 ruvds-wxkj6 CRON[3397]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:09:01 ruvds-wxkj6 CRON[3398]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:09:01 ruvds-wxkj6 CRON[3400]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:09:01 ruvds-wxkj6 CRON[3401]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jul 16 10:09:01 ruvds-wxkj6 CRON[3402]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:09:01 ruvds-wxkj6 CRON[3397]: pam_unix(cron:session): session closed for user root
Jul 16 10:09:01 ruvds-wxkj6 CRON[3399]: pam_unix(cron:session): session closed for user root
Jul 16 10:09:01 ruvds-wxkj6 CRON[3398]: pam_unix(cron:session): session closed for user root
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xc4fa6318/194.87.101.244
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xc4fa6318/194.87.101.244 not found for delete
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[40] to 84.201.157.25
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[40] to 84.201.157.25
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 956364656 processing failed
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[40] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[40] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 3172591501 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:09:02 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:09:06 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 3172591501, seq 4
Jul 16 10:09:06 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:09:13 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 3172591501, seq 4
Jul 16 10:09:13 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:09:26 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 3172591501, seq 4
Jul 16 10:09:26 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:09:50 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 3172591501, seq 4
Jul 16 10:09:50 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3413]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3414]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3408]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3411]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3412]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3409]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3406]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3410]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3415]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3417]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3418]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3419]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3416]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3420]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3421]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3412]: pam_unix(cron:session): session closed for user root
Jul 16 10:10:01 ruvds-wxkj6 CRON[3410]: pam_unix(cron:session): session closed for user root
Jul 16 10:10:01 ruvds-wxkj6 CRON[3409]: pam_unix(cron:session): session closed for user root
Jul 16 10:10:01 ruvds-wxkj6 CRON[3411]: pam_unix(cron:session): session closed for user root
Jul 16 10:10:01 ruvds-wxkj6 CRON[3428]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3407]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3433]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:10:01 ruvds-wxkj6 CRON[3406]: pam_unix(cron:session): session closed for user www-data
Jul 16 10:10:02 ruvds-wxkj6 CRON[3413]: pam_unix(cron:session): session closed for user root
Jul 16 10:10:02 ruvds-wxkj6 CRON[3414]: pam_unix(cron:session): session closed for user root
Jul 16 10:10:02 ruvds-wxkj6 CRON[3408]: pam_unix(cron:session): session closed for user root
Jul 16 10:10:02 ruvds-wxkj6 CRON[3407]: pam_unix(cron:session): session closed for user root
Jul 16 10:10:32 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 3172591501, seq 4
Jul 16 10:10:32 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:11:01 ruvds-wxkj6 CRON[3451]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:11:01 ruvds-wxkj6 CRON[3452]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:11:01 ruvds-wxkj6 CRON[3453]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:11:01 ruvds-wxkj6 CRON[3454]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:11:01 ruvds-wxkj6 CRON[3452]: pam_unix(cron:session): session closed for user root
Jul 16 10:11:01 ruvds-wxkj6 CRON[3451]: pam_unix(cron:session): session closed for user root
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xc0563e74/194.87.101.244
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xc0563e74/194.87.101.244 not found for delete
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[41] to 84.201.157.25
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[41] to 84.201.157.25
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[41] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[41] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 4215919300 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 10[ENC] parsed INFORMATIONAL_V1 request 291911295 [ HASH D ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 10[IKE] received DELETE for IKE_SA vpnki-l2tp[41]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 10[IKE] deleting IKE_SA vpnki-l2tp[41] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 10[IKE] deleting IKE_SA vpnki-l2tp[41] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 10[IKE] initiating Main Mode IKE_SA vpnki-l2tp[42] to 84.201.157.25
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 10[IKE] initiating Main Mode IKE_SA vpnki-l2tp[42] to 84.201.157.25
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 11[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 11[IKE] received DPD vendor ID
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 11[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 11[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 12[IKE] remote host is behind NAT
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[ENC] could not decrypt payloads
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[IKE] message parsing failed
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[IKE] INFORMATIONAL_V1 request with message ID 896667905 processing failed
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[IKE] IKE_SA vpnki-l2tp[42] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[IKE] IKE_SA vpnki-l2tp[42] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[ENC] generating QUICK_MODE request 566747325 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:11:47 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:11:51 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 1 of request message ID 566747325, seq 4
Jul 16 10:11:51 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:11:58 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 2 of request message ID 566747325, seq 4
Jul 16 10:11:58 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:12:01 ruvds-wxkj6 CRON[3460]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:12:01 ruvds-wxkj6 CRON[3459]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:12:01 ruvds-wxkj6 CRON[3461]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:12:01 ruvds-wxkj6 CRON[3462]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:12:01 ruvds-wxkj6 CRON[3460]: pam_unix(cron:session): session closed for user root
Jul 16 10:12:01 ruvds-wxkj6 CRON[3459]: pam_unix(cron:session): session closed for user root
Jul 16 10:12:11 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 3 of request message ID 566747325, seq 4
Jul 16 10:12:11 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:12:35 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 566747325, seq 4
Jul 16 10:12:35 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:13:01 ruvds-wxkj6 CRON[3466]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:13:01 ruvds-wxkj6 CRON[3465]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:13:01 ruvds-wxkj6 CRON[3467]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:13:01 ruvds-wxkj6 CRON[3468]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:13:01 ruvds-wxkj6 CRON[3466]: pam_unix(cron:session): session closed for user root
Jul 16 10:13:01 ruvds-wxkj6 CRON[3465]: pam_unix(cron:session): session closed for user root
Jul 16 10:13:17 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 566747325, seq 4
Jul 16 10:13:17 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:14:01 ruvds-wxkj6 CRON[3472]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:14:01 ruvds-wxkj6 CRON[3471]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:14:01 ruvds-wxkj6 CRON[3473]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:14:01 ruvds-wxkj6 CRON[3474]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:14:01 ruvds-wxkj6 CRON[3472]: pam_unix(cron:session): session closed for user root
Jul 16 10:14:01 ruvds-wxkj6 CRON[3471]: pam_unix(cron:session): session closed for user root
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xcab9d0c7/194.87.101.244
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xcab9d0c7/194.87.101.244 not found for delete
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[43] to 84.201.157.25
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[43] to 84.201.157.25
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 3927998920 processing failed
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[43] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[43] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 312834071 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:14:32 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:14:36 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 312834071, seq 4
Jul 16 10:14:36 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:14:44 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 312834071, seq 4
Jul 16 10:14:44 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:14:57 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 312834071, seq 4
Jul 16 10:14:57 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3485]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3483]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3482]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3481]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3480]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3479]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3484]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3486]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3487]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3488]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3489]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3490]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3491]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3492]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3478]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3493]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr addon/srvmon >/dev/null 2>&1)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3484]: pam_unix(cron:session): session closed for user root
Jul 16 10:15:01 ruvds-wxkj6 CRON[3497]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3483]: pam_unix(cron:session): session closed for user root
Jul 16 10:15:01 ruvds-wxkj6 CRON[3482]: pam_unix(cron:session): session closed for user root
Jul 16 10:15:01 ruvds-wxkj6 CRON[3481]: pam_unix(cron:session): session closed for user root
Jul 16 10:15:01 ruvds-wxkj6 CRON[3480]: pam_unix(cron:session): session closed for user root
Jul 16 10:15:01 ruvds-wxkj6 CRON[3505]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:15:01 ruvds-wxkj6 CRON[3486]: pam_unix(cron:session): session closed for user root
Jul 16 10:15:01 ruvds-wxkj6 CRON[3485]: pam_unix(cron:session): session closed for user root
Jul 16 10:15:01 ruvds-wxkj6 CRON[3479]: pam_unix(cron:session): session closed for user root
Jul 16 10:15:01 ruvds-wxkj6 CRON[3478]: pam_unix(cron:session): session closed for user root
Jul 16 10:15:20 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 312834071, seq 4
Jul 16 10:15:20 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:16:01 ruvds-wxkj6 CRON[3519]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:16:01 ruvds-wxkj6 CRON[3518]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:16:01 ruvds-wxkj6 CRON[3520]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:16:01 ruvds-wxkj6 CRON[3521]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:16:01 ruvds-wxkj6 CRON[3519]: pam_unix(cron:session): session closed for user root
Jul 16 10:16:01 ruvds-wxkj6 CRON[3518]: pam_unix(cron:session): session closed for user root
Jul 16 10:16:02 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 312834071, seq 4
Jul 16 10:16:02 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:17:01 ruvds-wxkj6 CRON[3527]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:17:01 ruvds-wxkj6 CRON[3526]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:17:01 ruvds-wxkj6 CRON[3525]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:17:01 ruvds-wxkj6 CRON[3528]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:17:01 ruvds-wxkj6 CRON[3529]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:17:01 ruvds-wxkj6 CRON[3530]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jul 16 10:17:01 ruvds-wxkj6 CRON[3527]: pam_unix(cron:session): session closed for user root
Jul 16 10:17:01 ruvds-wxkj6 CRON[3525]: pam_unix(cron:session): session closed for user root
Jul 16 10:17:01 ruvds-wxkj6 CRON[3526]: pam_unix(cron:session): session closed for user root
Jul 16 10:17:10 ruvds-wxkj6 systemd[1]: Starting Daily apt download activities...
Jul 16 10:17:13 ruvds-wxkj6 systemd[1]: apt-daily.service: Succeeded.
Jul 16 10:17:13 ruvds-wxkj6 systemd[1]: Finished Daily apt download activities.
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xcc64e7c5/194.87.101.244
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xcc64e7c5/194.87.101.244 not found for delete
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[44] to 84.201.157.25
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[44] to 84.201.157.25
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 1803062849 processing failed
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[44] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[44] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 425576416 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:17:17 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:17:21 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 425576416, seq 4
Jul 16 10:17:21 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:17:29 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 425576416, seq 4
Jul 16 10:17:29 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:17:42 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 425576416, seq 4
Jul 16 10:17:42 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:18:01 ruvds-wxkj6 CRON[3586]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:18:01 ruvds-wxkj6 CRON[3585]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:18:01 ruvds-wxkj6 CRON[3587]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:18:01 ruvds-wxkj6 CRON[3588]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:18:01 ruvds-wxkj6 CRON[3586]: pam_unix(cron:session): session closed for user root
Jul 16 10:18:01 ruvds-wxkj6 CRON[3585]: pam_unix(cron:session): session closed for user root
Jul 16 10:18:05 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 425576416, seq 4
Jul 16 10:18:05 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:18:47 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 425576416, seq 4
Jul 16 10:18:47 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:19:01 ruvds-wxkj6 CRON[3592]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:19:01 ruvds-wxkj6 CRON[3591]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:19:01 ruvds-wxkj6 CRON[3593]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:19:01 ruvds-wxkj6 CRON[3594]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:19:01 ruvds-wxkj6 CRON[3592]: pam_unix(cron:session): session closed for user root
Jul 16 10:19:01 ruvds-wxkj6 CRON[3591]: pam_unix(cron:session): session closed for user root
Jul 16 10:20:01 ruvds-wxkj6 CRON[3604]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:20:01 ruvds-wxkj6 CRON[3605]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:20:01 ruvds-wxkj6 CRON[3602]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:20:01 ruvds-wxkj6 CRON[3601]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3600]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3599]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3598]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3597]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3603]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3606]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3607]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3608]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3609]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3610]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3611]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3612]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3603]: pam_unix(cron:session): session closed for user root
Jul 16 10:20:02 ruvds-wxkj6 CRON[3616]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3601]: pam_unix(cron:session): session closed for user root
Jul 16 10:20:02 ruvds-wxkj6 CRON[3600]: pam_unix(cron:session): session closed for user root
Jul 16 10:20:02 ruvds-wxkj6 CRON[3602]: pam_unix(cron:session): session closed for user root
Jul 16 10:20:02 ruvds-wxkj6 CRON[3623]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 10:20:02 ruvds-wxkj6 CRON[3597]: pam_unix(cron:session): session closed for user www-data
Jul 16 10:20:02 ruvds-wxkj6 CRON[3604]: pam_unix(cron:session): session closed for user root
Jul 16 10:20:02 ruvds-wxkj6 CRON[3605]: pam_unix(cron:session): session closed for user root
Jul 16 10:20:02 ruvds-wxkj6 CRON[3599]: pam_unix(cron:session): session closed for user root
Jul 16 10:20:02 ruvds-wxkj6 CRON[3598]: pam_unix(cron:session): session closed for user root
Jul 16 10:20:02 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xc87eb61e/194.87.101.244
Jul 16 10:20:02 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xc87eb61e/194.87.101.244 not found for delete
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[45] to 84.201.157.25
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[45] to 84.201.157.25
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[ENC] could not decrypt payloads
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[IKE] message parsing failed
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[IKE] INFORMATIONAL_V1 request with message ID 2670239143 processing failed
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[45] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[45] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 2493852979 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:20:03 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:20:07 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 2493852979, seq 4
Jul 16 10:20:07 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:20:14 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 2 of request message ID 2493852979, seq 4
Jul 16 10:20:14 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:20:27 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 2493852979, seq 4
Jul 16 10:20:27 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:20:45 ruvds-wxkj6 sshd[3643]: Invalid user admin from 210.132.243.148 port 47873
Jul 16 10:20:45 ruvds-wxkj6 sshd[3643]: Failed none for invalid user admin from 210.132.243.148 port 47873 ssh2
Jul 16 10:20:45 ruvds-wxkj6 sshd[3643]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 10:20:45 ruvds-wxkj6 sshd[3643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.132.243.148
Jul 16 10:20:47 ruvds-wxkj6 sshd[3643]: Failed password for invalid user admin from 210.132.243.148 port 47873 ssh2
Jul 16 10:20:48 ruvds-wxkj6 sshd[3643]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 10:20:50 ruvds-wxkj6 sshd[3643]: Failed password for invalid user admin from 210.132.243.148 port 47873 ssh2
Jul 16 10:20:50 ruvds-wxkj6 sshd[3643]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 10:20:50 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 2493852979, seq 4
Jul 16 10:20:50 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:20:53 ruvds-wxkj6 sshd[3643]: Failed password for invalid user admin from 210.132.243.148 port 47873 ssh2
Jul 16 10:21:01 ruvds-wxkj6 CRON[3664]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:21:01 ruvds-wxkj6 CRON[3663]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:21:01 ruvds-wxkj6 CRON[3665]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:21:01 ruvds-wxkj6 CRON[3666]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:21:01 ruvds-wxkj6 CRON[3664]: pam_unix(cron:session): session closed for user root
Jul 16 10:21:01 ruvds-wxkj6 CRON[3663]: pam_unix(cron:session): session closed for user root
Jul 16 10:21:32 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 2493852979, seq 4
Jul 16 10:21:32 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:21:47 ruvds-wxkj6 sshd[3669]: Unable to negotiate with 61.177.172.107 port 13574: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Jul 16 10:22:01 ruvds-wxkj6 CRON[3671]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:22:01 ruvds-wxkj6 CRON[3672]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:22:01 ruvds-wxkj6 CRON[3673]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:22:01 ruvds-wxkj6 CRON[3674]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:22:01 ruvds-wxkj6 CRON[3672]: pam_unix(cron:session): session closed for user root
Jul 16 10:22:01 ruvds-wxkj6 CRON[3671]: pam_unix(cron:session): session closed for user root
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xce3327d9/194.87.101.244
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xce3327d9/194.87.101.244 not found for delete
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 16[IKE] giving up after 5 retransmits
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[46] to 84.201.157.25
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[46] to 84.201.157.25
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 07[IKE] received DPD vendor ID
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 07[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 07[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 3524799060 processing failed
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[46] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[46] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 4181466874 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:22:48 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:22:52 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 4181466874, seq 4
Jul 16 10:22:52 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:22:59 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 4181466874, seq 4
Jul 16 10:22:59 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:23:01 ruvds-wxkj6 CRON[3679]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:23:01 ruvds-wxkj6 CRON[3680]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:23:01 ruvds-wxkj6 CRON[3681]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:23:01 ruvds-wxkj6 CRON[3682]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:23:01 ruvds-wxkj6 CRON[3680]: pam_unix(cron:session): session closed for user root
Jul 16 10:23:01 ruvds-wxkj6 CRON[3679]: pam_unix(cron:session): session closed for user root
Jul 16 10:23:12 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 4181466874, seq 4
Jul 16 10:23:12 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:23:35 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 4181466874, seq 4
Jul 16 10:23:35 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:24:01 ruvds-wxkj6 CRON[3686]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:24:01 ruvds-wxkj6 CRON[3685]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:24:01 ruvds-wxkj6 CRON[3687]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:24:01 ruvds-wxkj6 CRON[3688]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:24:01 ruvds-wxkj6 CRON[3686]: pam_unix(cron:session): session closed for user root
Jul 16 10:24:01 ruvds-wxkj6 CRON[3685]: pam_unix(cron:session): session closed for user root
Jul 16 10:24:17 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 4181466874, seq 4
Jul 16 10:24:17 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3696]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3695]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3694]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3693]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3698]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3697]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3692]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3699]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3700]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3701]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3702]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3704]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3691]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3703]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3707]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3696]: pam_unix(cron:session): session closed for user root
Jul 16 10:25:01 ruvds-wxkj6 CRON[3695]: pam_unix(cron:session): session closed for user root
Jul 16 10:25:01 ruvds-wxkj6 CRON[3694]: pam_unix(cron:session): session closed for user root
Jul 16 10:25:01 ruvds-wxkj6 CRON[3693]: pam_unix(cron:session): session closed for user root
Jul 16 10:25:01 ruvds-wxkj6 CRON[3717]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:25:01 ruvds-wxkj6 CRON[3692]: pam_unix(cron:session): session closed for user root
Jul 16 10:25:01 ruvds-wxkj6 CRON[3691]: pam_unix(cron:session): session closed for user root
Jul 16 10:25:01 ruvds-wxkj6 CRON[3697]: pam_unix(cron:session): session closed for user root
Jul 16 10:25:01 ruvds-wxkj6 CRON[3698]: pam_unix(cron:session): session closed for user root
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xce233256/194.87.101.244
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xce233256/194.87.101.244 not found for delete
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[47] to 84.201.157.25
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[47] to 84.201.157.25
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 3225970865 processing failed
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[47] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[47] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 3362572775 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:25:33 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:25:36 ruvds-wxkj6 ntpd[480]: 195.3.254.2 local addr 194.87.101.244 -> <null>
Jul 16 10:25:37 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 3362572775, seq 4
Jul 16 10:25:37 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:25:44 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 3362572775, seq 4
Jul 16 10:25:44 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:25:57 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 3362572775, seq 4
Jul 16 10:25:57 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:26:01 ruvds-wxkj6 CRON[3729]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:26:01 ruvds-wxkj6 CRON[3728]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:26:01 ruvds-wxkj6 CRON[3730]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:26:01 ruvds-wxkj6 CRON[3731]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:26:01 ruvds-wxkj6 CRON[3729]: pam_unix(cron:session): session closed for user root
Jul 16 10:26:01 ruvds-wxkj6 CRON[3728]: pam_unix(cron:session): session closed for user root
Jul 16 10:26:20 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 3362572775, seq 4
Jul 16 10:26:20 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:27:01 ruvds-wxkj6 CRON[3735]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:27:01 ruvds-wxkj6 CRON[3734]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:27:01 ruvds-wxkj6 CRON[3736]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:27:01 ruvds-wxkj6 CRON[3737]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:27:01 ruvds-wxkj6 CRON[3735]: pam_unix(cron:session): session closed for user root
Jul 16 10:27:01 ruvds-wxkj6 CRON[3734]: pam_unix(cron:session): session closed for user root
Jul 16 10:27:02 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 3362572775, seq 4
Jul 16 10:27:02 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:28:01 ruvds-wxkj6 CRON[3741]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:28:01 ruvds-wxkj6 CRON[3742]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:28:01 ruvds-wxkj6 CRON[3743]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:28:01 ruvds-wxkj6 CRON[3744]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:28:01 ruvds-wxkj6 CRON[3742]: pam_unix(cron:session): session closed for user root
Jul 16 10:28:01 ruvds-wxkj6 CRON[3741]: pam_unix(cron:session): session closed for user root
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xce73c4e0/194.87.101.244
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xce73c4e0/194.87.101.244 not found for delete
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[48] to 84.201.157.25
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[48] to 84.201.157.25
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 1928165014 processing failed
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[48] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[48] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 1511890374 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:28:18 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:28:22 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 1511890374, seq 4
Jul 16 10:28:22 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:28:29 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 1511890374, seq 4
Jul 16 10:28:29 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:28:42 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 1511890374, seq 4
Jul 16 10:28:42 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:29:01 ruvds-wxkj6 CRON[3750]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:29:01 ruvds-wxkj6 CRON[3749]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:29:01 ruvds-wxkj6 CRON[3751]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:29:01 ruvds-wxkj6 CRON[3752]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:29:01 ruvds-wxkj6 CRON[3750]: pam_unix(cron:session): session closed for user root
Jul 16 10:29:01 ruvds-wxkj6 CRON[3749]: pam_unix(cron:session): session closed for user root
Jul 16 10:29:05 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 1511890374, seq 4
Jul 16 10:29:05 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:29:47 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 1511890374, seq 4
Jul 16 10:29:47 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3760]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3761]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3763]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3759]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3757]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3762]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3756]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3758]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3755]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3764]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3766]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3765]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr addon/srvmon >/dev/null 2>&1)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3767]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3768]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:30:01 ruvds-wxkj6 CRON[3769]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:30:02 ruvds-wxkj6 CRON[3770]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:30:02 ruvds-wxkj6 CRON[3771]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:30:02 ruvds-wxkj6 CRON[3761]: pam_unix(cron:session): session closed for user root
Jul 16 10:30:02 ruvds-wxkj6 CRON[3759]: pam_unix(cron:session): session closed for user root
Jul 16 10:30:02 ruvds-wxkj6 CRON[3758]: pam_unix(cron:session): session closed for user root
Jul 16 10:30:02 ruvds-wxkj6 CRON[3760]: pam_unix(cron:session): session closed for user root
Jul 16 10:30:02 ruvds-wxkj6 CRON[3777]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:30:02 ruvds-wxkj6 CRON[3762]: pam_unix(cron:session): session closed for user root
Jul 16 10:30:02 ruvds-wxkj6 CRON[3781]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 10:30:02 ruvds-wxkj6 CRON[3783]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:30:02 ruvds-wxkj6 CRON[3755]: pam_unix(cron:session): session closed for user www-data
Jul 16 10:30:02 ruvds-wxkj6 CRON[3763]: pam_unix(cron:session): session closed for user root
Jul 16 10:30:02 ruvds-wxkj6 CRON[3757]: pam_unix(cron:session): session closed for user root
Jul 16 10:30:02 ruvds-wxkj6 CRON[3764]: pam_unix(cron:session): session closed for user root
Jul 16 10:30:02 ruvds-wxkj6 CRON[3756]: pam_unix(cron:session): session closed for user root
Jul 16 10:30:41 ruvds-wxkj6 sshd[3803]: Invalid user \320\272\321\321\320\265 from 91.228.97.117 port 50177
Jul 16 10:30:42 ruvds-wxkj6 sshd[3803]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 10:30:42 ruvds-wxkj6 sshd[3803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.228.97.117
Jul 16 10:30:45 ruvds-wxkj6 sshd[3803]: Failed password for invalid user \320\272\321\321\320\265 from 91.228.97.117 port 50177 ssh2
Jul 16 10:30:52 ruvds-wxkj6 sshd[3803]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 10:30:55 ruvds-wxkj6 sshd[3803]: Failed password for invalid user \320\272\321\321\320\265 from 91.228.97.117 port 50177 ssh2
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xca1661ad/194.87.101.244
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xca1661ad/194.87.101.244 not found for delete
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[49] to 84.201.157.25
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[49] to 84.201.157.25
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[ENC] could not decrypt payloads
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[IKE] message parsing failed
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[IKE] INFORMATIONAL_V1 request with message ID 187395860 processing failed
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[49] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[49] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 327172150 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:31:03 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:31:05 ruvds-wxkj6 sshd[3803]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 10:31:05 ruvds-wxkj6 CRON[3813]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:31:05 ruvds-wxkj6 CRON[3814]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:31:05 ruvds-wxkj6 CRON[3816]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:31:05 ruvds-wxkj6 CRON[3817]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:31:05 ruvds-wxkj6 CRON[3814]: pam_unix(cron:session): session closed for user root
Jul 16 10:31:05 ruvds-wxkj6 CRON[3813]: pam_unix(cron:session): session closed for user root
Jul 16 10:31:07 ruvds-wxkj6 sshd[3803]: Failed password for invalid user \320\272\321\321\320\265 from 91.228.97.117 port 50177 ssh2
Jul 16 10:31:07 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 327172150, seq 4
Jul 16 10:31:07 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:31:08 ruvds-wxkj6 named[441]: client @0x7f51ac63aa98 104.244.74.150#37432 (sl): query (cache) 'sl/ANY/IN' denied
Jul 16 10:31:11 ruvds-wxkj6 sshd[3803]: Connection closed by invalid user \\320\\272\\321\\321\\320\\265 91.228.97.117 port 50177 [preauth]
Jul 16 10:31:11 ruvds-wxkj6 sshd[3803]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.228.97.117
Jul 16 10:31:14 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 2 of request message ID 327172150, seq 4
Jul 16 10:31:14 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:31:27 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 327172150, seq 4
Jul 16 10:31:27 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:31:51 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 327172150, seq 4
Jul 16 10:31:51 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:32:01 ruvds-wxkj6 CRON[3825]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:32:01 ruvds-wxkj6 CRON[3826]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:32:01 ruvds-wxkj6 CRON[3827]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:32:01 ruvds-wxkj6 CRON[3828]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:32:01 ruvds-wxkj6 CRON[3826]: pam_unix(cron:session): session closed for user root
Jul 16 10:32:01 ruvds-wxkj6 CRON[3825]: pam_unix(cron:session): session closed for user root
Jul 16 10:32:33 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 327172150, seq 4
Jul 16 10:32:33 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:33:01 ruvds-wxkj6 CRON[3832]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:33:01 ruvds-wxkj6 CRON[3831]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:33:01 ruvds-wxkj6 CRON[3833]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:33:01 ruvds-wxkj6 CRON[3834]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:33:01 ruvds-wxkj6 CRON[3832]: pam_unix(cron:session): session closed for user root
Jul 16 10:33:01 ruvds-wxkj6 CRON[3831]: pam_unix(cron:session): session closed for user root
Jul 16 10:33:28 ruvds-wxkj6 login[466]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Jul 16 10:33:31 ruvds-wxkj6 login[466]: FAILED LOGIN (1) on '/dev/tty1' FOR 'root', Authentication failure
Jul 16 10:33:47 ruvds-wxkj6 login[466]: pam_unix(login:auth): check pass; user unknown
Jul 16 10:33:47 ruvds-wxkj6 login[466]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xc6bf5b26/194.87.101.244
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xc6bf5b26/194.87.101.244 not found for delete
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 16[IKE] giving up after 5 retransmits
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[50] to 84.201.157.25
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[50] to 84.201.157.25
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 07[IKE] received DPD vendor ID
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 07[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 07[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[50] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[50] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 1565634777 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 05[ENC] parsed INFORMATIONAL_V1 request 1414116244 [ HASH D ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 05[IKE] received DELETE for IKE_SA vpnki-l2tp[50]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 05[IKE] deleting IKE_SA vpnki-l2tp[50] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 05[IKE] deleting IKE_SA vpnki-l2tp[50] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 05[IKE] initiating Main Mode IKE_SA vpnki-l2tp[51] to 84.201.157.25
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 05[IKE] initiating Main Mode IKE_SA vpnki-l2tp[51] to 84.201.157.25
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 08[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 08[IKE] received DPD vendor ID
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 08[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 08[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 09[IKE] remote host is behind NAT
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[ENC] could not decrypt payloads
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[IKE] message parsing failed
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[IKE] INFORMATIONAL_V1 request with message ID 2767201286 processing failed
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[IKE] IKE_SA vpnki-l2tp[51] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[IKE] IKE_SA vpnki-l2tp[51] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[ENC] generating QUICK_MODE request 2781244666 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:33:48 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:33:51 ruvds-wxkj6 login[466]: FAILED LOGIN (2) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure
Jul 16 10:33:52 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 1 of request message ID 2781244666, seq 4
Jul 16 10:33:52 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:33:59 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 2 of request message ID 2781244666, seq 4
Jul 16 10:33:59 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:34:01 ruvds-wxkj6 CRON[3839]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:34:01 ruvds-wxkj6 CRON[3840]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:34:01 ruvds-wxkj6 CRON[3841]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:34:01 ruvds-wxkj6 CRON[3842]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:34:01 ruvds-wxkj6 CRON[3840]: pam_unix(cron:session): session closed for user root
Jul 16 10:34:01 ruvds-wxkj6 CRON[3839]: pam_unix(cron:session): session closed for user root
Jul 16 10:34:08 ruvds-wxkj6 login[466]: FAILED LOGIN (3) on '/dev/tty1' FOR 'root', Authentication failure
Jul 16 10:34:12 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 3 of request message ID 2781244666, seq 4
Jul 16 10:34:12 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:34:16 ruvds-wxkj6 systemd[1]: getty@tty1.service: Succeeded.
Jul 16 10:34:16 ruvds-wxkj6 systemd[1]: getty@tty1.service: Scheduled restart job, restart counter is at 1.
Jul 16 10:34:16 ruvds-wxkj6 systemd[1]: Stopped Getty on tty1.
Jul 16 10:34:16 ruvds-wxkj6 systemd[1]: Started Getty on tty1.
Jul 16 10:34:24 ruvds-wxkj6 login[3846]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty1 ruser= rhost=  user=root
Jul 16 10:34:27 ruvds-wxkj6 login[3846]: FAILED LOGIN (1) on '/dev/tty1' FOR 'root', Authentication failure
Jul 16 10:34:36 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 2781244666, seq 4
Jul 16 10:34:36 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3854]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3852]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3851]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3850]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3849]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3853]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3847]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3855]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3856]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3857]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3848]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3858]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3859]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3860]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3852]: pam_unix(cron:session): session closed for user root
Jul 16 10:35:01 ruvds-wxkj6 CRON[3851]: pam_unix(cron:session): session closed for user root
Jul 16 10:35:01 ruvds-wxkj6 CRON[3864]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3849]: pam_unix(cron:session): session closed for user root
Jul 16 10:35:01 ruvds-wxkj6 CRON[3850]: pam_unix(cron:session): session closed for user root
Jul 16 10:35:01 ruvds-wxkj6 CRON[3869]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:35:01 ruvds-wxkj6 CRON[3854]: pam_unix(cron:session): session closed for user root
Jul 16 10:35:01 ruvds-wxkj6 CRON[3853]: pam_unix(cron:session): session closed for user root
Jul 16 10:35:01 ruvds-wxkj6 CRON[3847]: pam_unix(cron:session): session closed for user root
Jul 16 10:35:01 ruvds-wxkj6 CRON[3848]: pam_unix(cron:session): session closed for user root
Jul 16 10:35:18 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 2781244666, seq 4
Jul 16 10:35:18 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:35:20 ruvds-wxkj6 systemd[1]: getty@tty1.service: Succeeded.
Jul 16 10:35:20 ruvds-wxkj6 systemd[1]: getty@tty1.service: Scheduled restart job, restart counter is at 2.
Jul 16 10:35:20 ruvds-wxkj6 systemd[1]: Stopped Getty on tty1.
Jul 16 10:35:20 ruvds-wxkj6 systemd[1]: Started Getty on tty1.
Jul 16 10:36:01 ruvds-wxkj6 CRON[3886]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:36:01 ruvds-wxkj6 CRON[3887]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:36:01 ruvds-wxkj6 CRON[3888]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:36:01 ruvds-wxkj6 CRON[3889]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:36:01 ruvds-wxkj6 CRON[3887]: pam_unix(cron:session): session closed for user root
Jul 16 10:36:01 ruvds-wxkj6 CRON[3886]: pam_unix(cron:session): session closed for user root
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xc346c614/194.87.101.244
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xc346c614/194.87.101.244 not found for delete
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[52] to 84.201.157.25
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[52] to 84.201.157.25
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[52] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[52] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 3623492471 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 13[ENC] parsed INFORMATIONAL_V1 request 238982077 [ HASH D ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 13[IKE] received DELETE for IKE_SA vpnki-l2tp[52]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 13[IKE] deleting IKE_SA vpnki-l2tp[52] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 13[IKE] deleting IKE_SA vpnki-l2tp[52] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 13[IKE] initiating Main Mode IKE_SA vpnki-l2tp[53] to 84.201.157.25
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 13[IKE] initiating Main Mode IKE_SA vpnki-l2tp[53] to 84.201.157.25
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 14[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 14[IKE] received DPD vendor ID
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 14[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 14[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 16[IKE] remote host is behind NAT
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[ENC] could not decrypt payloads
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[IKE] message parsing failed
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[IKE] INFORMATIONAL_V1 request with message ID 3025796734 processing failed
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[53] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[53] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[ENC] generating QUICK_MODE request 607413512 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:36:33 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:36:37 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 1 of request message ID 607413512, seq 4
Jul 16 10:36:37 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:36:45 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 2 of request message ID 607413512, seq 4
Jul 16 10:36:45 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:36:58 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 3 of request message ID 607413512, seq 4
Jul 16 10:36:58 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:37:01 ruvds-wxkj6 CRON[3894]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:37:01 ruvds-wxkj6 CRON[3893]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:37:01 ruvds-wxkj6 CRON[3895]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:37:01 ruvds-wxkj6 CRON[3896]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:37:01 ruvds-wxkj6 CRON[3894]: pam_unix(cron:session): session closed for user root
Jul 16 10:37:01 ruvds-wxkj6 CRON[3893]: pam_unix(cron:session): session closed for user root
Jul 16 10:37:21 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 607413512, seq 4
Jul 16 10:37:21 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:38:02 ruvds-wxkj6 CRON[3899]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:38:02 ruvds-wxkj6 CRON[3900]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:38:02 ruvds-wxkj6 CRON[3901]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:38:02 ruvds-wxkj6 CRON[3902]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:38:02 ruvds-wxkj6 CRON[3900]: pam_unix(cron:session): session closed for user root
Jul 16 10:38:02 ruvds-wxkj6 CRON[3899]: pam_unix(cron:session): session closed for user root
Jul 16 10:38:03 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 607413512, seq 4
Jul 16 10:38:03 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:39:00 ruvds-wxkj6 systemd[1]: Starting Clean php session files...
Jul 16 10:39:01 ruvds-wxkj6 CRON[3921]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:39:01 ruvds-wxkj6 CRON[3919]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:39:01 ruvds-wxkj6 CRON[3920]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:39:01 ruvds-wxkj6 CRON[3922]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:39:01 ruvds-wxkj6 CRON[3923]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:39:01 ruvds-wxkj6 CRON[3924]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jul 16 10:39:01 ruvds-wxkj6 CRON[3919]: pam_unix(cron:session): session closed for user root
Jul 16 10:39:01 ruvds-wxkj6 CRON[3921]: pam_unix(cron:session): session closed for user root
Jul 16 10:39:01 ruvds-wxkj6 CRON[3920]: pam_unix(cron:session): session closed for user root
Jul 16 10:39:06 ruvds-wxkj6 systemd[1]: phpsessionclean.service: Succeeded.
Jul 16 10:39:06 ruvds-wxkj6 systemd[1]: Finished Clean php session files.
Jul 16 10:39:18 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xc8cfedf0/194.87.101.244
Jul 16 10:39:18 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xc8cfedf0/194.87.101.244 not found for delete
Jul 16 10:39:18 ruvds-wxkj6 charon[1363]: 16[IKE] giving up after 5 retransmits
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[54] to 84.201.157.25
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[54] to 84.201.157.25
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 07[IKE] received DPD vendor ID
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 07[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 07[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 3487590927 processing failed
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[54] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[54] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 1902126247 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:39:19 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:39:23 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 1902126247, seq 4
Jul 16 10:39:23 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:39:30 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 1902126247, seq 4
Jul 16 10:39:30 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:39:43 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 1902126247, seq 4
Jul 16 10:39:43 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:40:01 ruvds-wxkj6 CRON[4001]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:40:01 ruvds-wxkj6 CRON[3998]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:40:01 ruvds-wxkj6 CRON[3997]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:40:01 ruvds-wxkj6 CRON[3996]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:40:01 ruvds-wxkj6 CRON[3999]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:40:01 ruvds-wxkj6 CRON[4002]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:40:01 ruvds-wxkj6 CRON[4000]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:40:01 ruvds-wxkj6 CRON[4003]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:40:01 ruvds-wxkj6 CRON[4005]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:40:01 ruvds-wxkj6 CRON[4004]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:40:01 ruvds-wxkj6 CRON[4006]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:40:01 ruvds-wxkj6 CRON[3994]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 10:40:01 ruvds-wxkj6 CRON[4007]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:40:01 ruvds-wxkj6 CRON[4008]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:40:01 ruvds-wxkj6 CRON[4009]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:40:01 ruvds-wxkj6 CRON[3995]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:40:01 ruvds-wxkj6 CRON[3999]: pam_unix(cron:session): session closed for user root
Jul 16 10:40:01 ruvds-wxkj6 CRON[4000]: pam_unix(cron:session): session closed for user root
Jul 16 10:40:01 ruvds-wxkj6 CRON[3998]: pam_unix(cron:session): session closed for user root
Jul 16 10:40:01 ruvds-wxkj6 CRON[4015]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:40:01 ruvds-wxkj6 CRON[3997]: pam_unix(cron:session): session closed for user root
Jul 16 10:40:01 ruvds-wxkj6 CRON[4025]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 10:40:01 ruvds-wxkj6 CRON[3994]: pam_unix(cron:session): session closed for user www-data
Jul 16 10:40:01 ruvds-wxkj6 CRON[3996]: pam_unix(cron:session): session closed for user root
Jul 16 10:40:01 ruvds-wxkj6 CRON[3995]: pam_unix(cron:session): session closed for user root
Jul 16 10:40:01 ruvds-wxkj6 CRON[4002]: pam_unix(cron:session): session closed for user root
Jul 16 10:40:01 ruvds-wxkj6 CRON[4001]: pam_unix(cron:session): session closed for user root
Jul 16 10:40:06 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 1902126247, seq 4
Jul 16 10:40:06 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:40:48 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 1902126247, seq 4
Jul 16 10:40:48 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:41:01 ruvds-wxkj6 CRON[4039]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:41:01 ruvds-wxkj6 CRON[4040]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:41:01 ruvds-wxkj6 CRON[4041]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:41:01 ruvds-wxkj6 CRON[4042]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:41:01 ruvds-wxkj6 CRON[4040]: pam_unix(cron:session): session closed for user root
Jul 16 10:41:01 ruvds-wxkj6 CRON[4039]: pam_unix(cron:session): session closed for user root
Jul 16 10:42:01 ruvds-wxkj6 CRON[4051]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:42:01 ruvds-wxkj6 CRON[4052]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:42:01 ruvds-wxkj6 CRON[4050]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:42:01 ruvds-wxkj6 CRON[4051]: pam_unix(cron:session): session closed for user root
Jul 16 10:42:01 ruvds-wxkj6 CRON[4054]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:42:01 ruvds-wxkj6 CRON[4050]: pam_unix(cron:session): session closed for user root
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xccf60777/194.87.101.244
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xccf60777/194.87.101.244 not found for delete
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[55] to 84.201.157.25
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[55] to 84.201.157.25
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 2376393612 processing failed
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[55] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[55] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 86637322 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:42:04 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:42:08 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 86637322, seq 4
Jul 16 10:42:08 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:42:15 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 86637322, seq 4
Jul 16 10:42:15 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:42:28 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 86637322, seq 4
Jul 16 10:42:28 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:42:51 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 86637322, seq 4
Jul 16 10:42:51 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:43:01 ruvds-wxkj6 CRON[4058]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:43:01 ruvds-wxkj6 CRON[4059]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:43:01 ruvds-wxkj6 CRON[4060]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:43:01 ruvds-wxkj6 CRON[4061]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:43:01 ruvds-wxkj6 CRON[4059]: pam_unix(cron:session): session closed for user root
Jul 16 10:43:01 ruvds-wxkj6 CRON[4058]: pam_unix(cron:session): session closed for user root
Jul 16 10:43:33 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 86637322, seq 4
Jul 16 10:43:33 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:44:01 ruvds-wxkj6 CRON[4066]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:44:01 ruvds-wxkj6 CRON[4065]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:44:01 ruvds-wxkj6 CRON[4067]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:44:01 ruvds-wxkj6 CRON[4068]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:44:01 ruvds-wxkj6 CRON[4066]: pam_unix(cron:session): session closed for user root
Jul 16 10:44:01 ruvds-wxkj6 CRON[4065]: pam_unix(cron:session): session closed for user root
Jul 16 10:44:23 ruvds-wxkj6 charon[1363]: 03[ENC] no message rules specified for this message type
Jul 16 10:44:23 ruvds-wxkj6 charon[1363]: 03[NET] received unsupported IKE version 0.0 from 146.88.240.4, sending INVALID_MAJOR_VERSION
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xceaed553/194.87.101.244
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xceaed553/194.87.101.244 not found for delete
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[56] to 84.201.157.25
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[56] to 84.201.157.25
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 3426385942 processing failed
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[56] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[56] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 2927216831 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:44:49 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:44:53 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 2927216831, seq 4
Jul 16 10:44:53 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:45:00 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 2927216831, seq 4
Jul 16 10:45:00 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4078]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4079]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4077]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4076]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4075]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4080]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4074]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4073]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4081]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4082]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4083]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4084]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4072]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4085]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4086]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4087]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr addon/srvmon >/dev/null 2>&1)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4078]: pam_unix(cron:session): session closed for user root
Jul 16 10:45:01 ruvds-wxkj6 CRON[4075]: pam_unix(cron:session): session closed for user root
Jul 16 10:45:01 ruvds-wxkj6 CRON[4093]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4077]: pam_unix(cron:session): session closed for user root
Jul 16 10:45:01 ruvds-wxkj6 CRON[4076]: pam_unix(cron:session): session closed for user root
Jul 16 10:45:01 ruvds-wxkj6 CRON[4074]: pam_unix(cron:session): session closed for user root
Jul 16 10:45:01 ruvds-wxkj6 CRON[4099]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:45:01 ruvds-wxkj6 CRON[4079]: pam_unix(cron:session): session closed for user root
Jul 16 10:45:01 ruvds-wxkj6 CRON[4080]: pam_unix(cron:session): session closed for user root
Jul 16 10:45:01 ruvds-wxkj6 CRON[4073]: pam_unix(cron:session): session closed for user root
Jul 16 10:45:01 ruvds-wxkj6 CRON[4072]: pam_unix(cron:session): session closed for user root
Jul 16 10:45:13 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 2927216831, seq 4
Jul 16 10:45:13 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:45:36 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 2927216831, seq 4
Jul 16 10:45:36 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:46:01 ruvds-wxkj6 CRON[4111]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:46:01 ruvds-wxkj6 CRON[4112]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:46:01 ruvds-wxkj6 CRON[4113]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:46:01 ruvds-wxkj6 CRON[4114]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:46:01 ruvds-wxkj6 CRON[4112]: pam_unix(cron:session): session closed for user root
Jul 16 10:46:01 ruvds-wxkj6 CRON[4111]: pam_unix(cron:session): session closed for user root
Jul 16 10:46:16 ruvds-wxkj6 sshd[4117]: Accepted password for root from 91.228.97.117 port 50298 ssh2
Jul 16 10:46:16 ruvds-wxkj6 sshd[4117]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:46:18 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 2927216831, seq 4
Jul 16 10:46:18 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:46:18 ruvds-wxkj6 systemd-logind[273]: New session 473 of user root.
Jul 16 10:46:18 ruvds-wxkj6 systemd[1]: Started Session 473 of user root.
Jul 16 10:47:01 ruvds-wxkj6 CRON[4129]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:47:01 ruvds-wxkj6 CRON[4128]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:47:01 ruvds-wxkj6 CRON[4130]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:47:01 ruvds-wxkj6 CRON[4131]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:47:01 ruvds-wxkj6 CRON[4129]: pam_unix(cron:session): session closed for user root
Jul 16 10:47:01 ruvds-wxkj6 CRON[4128]: pam_unix(cron:session): session closed for user root
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xc8705072/194.87.101.244
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xc8705072/194.87.101.244 not found for delete
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[57] to 84.201.157.25
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[57] to 84.201.157.25
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[ENC] could not decrypt payloads
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[IKE] message parsing failed
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[IKE] INFORMATIONAL_V1 request with message ID 2192122659 processing failed
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[57] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[57] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 2116636931 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:47:34 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:47:38 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 2116636931, seq 4
Jul 16 10:47:38 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:47:45 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 2 of request message ID 2116636931, seq 4
Jul 16 10:47:45 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:47:58 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 2116636931, seq 4
Jul 16 10:47:58 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:48:01 ruvds-wxkj6 CRON[4141]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:48:01 ruvds-wxkj6 CRON[4142]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:48:01 ruvds-wxkj6 CRON[4140]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:48:02 ruvds-wxkj6 CRON[4141]: pam_unix(cron:session): session closed for user root
Jul 16 10:48:02 ruvds-wxkj6 CRON[4144]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:48:02 ruvds-wxkj6 CRON[4140]: pam_unix(cron:session): session closed for user root
Jul 16 10:48:21 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 2116636931, seq 4
Jul 16 10:48:21 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:48:28 ruvds-wxkj6 sshd[4146]: Unable to negotiate with 61.177.172.184 port 22734: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Jul 16 10:48:54 ruvds-wxkj6 sshd[4148]: Accepted password for root from 91.228.97.117 port 50310 ssh2
Jul 16 10:48:54 ruvds-wxkj6 sshd[4148]: pam_unix(sshd:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:48:54 ruvds-wxkj6 systemd-logind[273]: New session 478 of user root.
Jul 16 10:48:54 ruvds-wxkj6 systemd[1]: Started Session 478 of user root.
Jul 16 10:49:01 ruvds-wxkj6 CRON[4156]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:49:01 ruvds-wxkj6 CRON[4155]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:49:01 ruvds-wxkj6 CRON[4157]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:49:01 ruvds-wxkj6 CRON[4158]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:49:01 ruvds-wxkj6 CRON[4156]: pam_unix(cron:session): session closed for user root
Jul 16 10:49:01 ruvds-wxkj6 CRON[4155]: pam_unix(cron:session): session closed for user root
Jul 16 10:49:03 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 2116636931, seq 4
Jul 16 10:49:03 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:49:13 ruvds-wxkj6 sshd[4148]: pam_unix(sshd:session): session closed for user root
Jul 16 10:49:13 ruvds-wxkj6 systemd-logind[273]: Session 478 logged out. Waiting for processes to exit.
Jul 16 10:49:13 ruvds-wxkj6 systemd[1]: session-478.scope: Succeeded.
Jul 16 10:49:13 ruvds-wxkj6 systemd-logind[273]: Removed session 478.
Jul 16 10:50:01 ruvds-wxkj6 CRON[4170]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4171]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4167]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4166]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4165]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4168]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4169]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4164]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4163]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4173]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4172]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4174]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4175]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4176]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4177]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4169]: pam_unix(cron:session): session closed for user root
Jul 16 10:50:01 ruvds-wxkj6 CRON[4168]: pam_unix(cron:session): session closed for user root
Jul 16 10:50:01 ruvds-wxkj6 CRON[4180]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4167]: pam_unix(cron:session): session closed for user root
Jul 16 10:50:01 ruvds-wxkj6 CRON[4184]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4166]: pam_unix(cron:session): session closed for user root
Jul 16 10:50:01 ruvds-wxkj6 CRON[4188]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 10:50:01 ruvds-wxkj6 CRON[4163]: pam_unix(cron:session): session closed for user www-data
Jul 16 10:50:01 ruvds-wxkj6 CRON[4170]: pam_unix(cron:session): session closed for user root
Jul 16 10:50:01 ruvds-wxkj6 CRON[4171]: pam_unix(cron:session): session closed for user root
Jul 16 10:50:01 ruvds-wxkj6 CRON[4164]: pam_unix(cron:session): session closed for user root
Jul 16 10:50:01 ruvds-wxkj6 CRON[4165]: pam_unix(cron:session): session closed for user root
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xca28e22b/194.87.101.244
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xca28e22b/194.87.101.244 not found for delete
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 16[IKE] giving up after 5 retransmits
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[58] to 84.201.157.25
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[58] to 84.201.157.25
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 07[IKE] received DPD vendor ID
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 07[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 07[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 3098883090 processing failed
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[58] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[58] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 667278188 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:50:19 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:50:23 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 667278188, seq 4
Jul 16 10:50:23 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:50:30 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 667278188, seq 4
Jul 16 10:50:30 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:50:43 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 667278188, seq 4
Jul 16 10:50:43 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:51:01 ruvds-wxkj6 CRON[4210]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:51:01 ruvds-wxkj6 CRON[4209]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:51:01 ruvds-wxkj6 CRON[4211]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:51:01 ruvds-wxkj6 CRON[4212]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:51:01 ruvds-wxkj6 CRON[4210]: pam_unix(cron:session): session closed for user root
Jul 16 10:51:01 ruvds-wxkj6 CRON[4209]: pam_unix(cron:session): session closed for user root
Jul 16 10:51:07 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 667278188, seq 4
Jul 16 10:51:07 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:51:49 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 667278188, seq 4
Jul 16 10:51:49 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:52:01 ruvds-wxkj6 CRON[4216]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:52:01 ruvds-wxkj6 CRON[4217]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:52:01 ruvds-wxkj6 CRON[4215]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:52:01 ruvds-wxkj6 CRON[4216]: pam_unix(cron:session): session closed for user root
Jul 16 10:52:01 ruvds-wxkj6 CRON[4219]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:52:01 ruvds-wxkj6 CRON[4215]: pam_unix(cron:session): session closed for user root
Jul 16 10:53:01 ruvds-wxkj6 CRON[4221]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:53:01 ruvds-wxkj6 CRON[4222]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:53:01 ruvds-wxkj6 CRON[4223]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:53:01 ruvds-wxkj6 CRON[4224]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:53:01 ruvds-wxkj6 CRON[4222]: pam_unix(cron:session): session closed for user root
Jul 16 10:53:01 ruvds-wxkj6 CRON[4221]: pam_unix(cron:session): session closed for user root
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xc6049ed9/194.87.101.244
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xc6049ed9/194.87.101.244 not found for delete
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[59] to 84.201.157.25
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[59] to 84.201.157.25
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 545479132 processing failed
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[59] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[59] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 2579885033 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:53:04 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:53:08 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 2579885033, seq 4
Jul 16 10:53:08 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:53:15 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 2579885033, seq 4
Jul 16 10:53:15 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:53:28 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 2579885033, seq 4
Jul 16 10:53:28 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:53:46 ruvds-wxkj6 sshd[4228]: error: kex_exchange_identification: Connection closed by remote host
Jul 16 10:53:46 ruvds-wxkj6 sshd[4228]: Connection closed by 141.98.11.29 port 44724
Jul 16 10:53:52 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 2579885033, seq 4
Jul 16 10:53:52 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:54:01 ruvds-wxkj6 CRON[4230]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:54:01 ruvds-wxkj6 CRON[4229]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:54:01 ruvds-wxkj6 CRON[4231]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:54:01 ruvds-wxkj6 CRON[4232]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:54:01 ruvds-wxkj6 CRON[4230]: pam_unix(cron:session): session closed for user root
Jul 16 10:54:01 ruvds-wxkj6 CRON[4229]: pam_unix(cron:session): session closed for user root
Jul 16 10:54:10 ruvds-wxkj6 sshd[4236]: Unable to negotiate with 141.98.11.29 port 37606: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Jul 16 10:54:34 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 2579885033, seq 4
Jul 16 10:54:34 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4245]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4241]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4244]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4242]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4240]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4246]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4238]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4243]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4247]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4239]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4249]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4250]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4251]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4241]: pam_unix(cron:session): session closed for user root
Jul 16 10:55:01 ruvds-wxkj6 CRON[4254]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4257]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4258]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 10:55:01 ruvds-wxkj6 CRON[4240]: pam_unix(cron:session): session closed for user root
Jul 16 10:55:01 ruvds-wxkj6 CRON[4242]: pam_unix(cron:session): session closed for user root
Jul 16 10:55:01 ruvds-wxkj6 CRON[4243]: pam_unix(cron:session): session closed for user root
Jul 16 10:55:01 ruvds-wxkj6 CRON[4245]: pam_unix(cron:session): session closed for user root
Jul 16 10:55:01 ruvds-wxkj6 CRON[4244]: pam_unix(cron:session): session closed for user root
Jul 16 10:55:01 ruvds-wxkj6 CRON[4238]: pam_unix(cron:session): session closed for user root
Jul 16 10:55:01 ruvds-wxkj6 CRON[4239]: pam_unix(cron:session): session closed for user root
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xc9202fe2/194.87.101.244
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xc9202fe2/194.87.101.244 not found for delete
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[60] to 84.201.157.25
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[60] to 84.201.157.25
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 1322679364 processing failed
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[60] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[60] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 3552899661 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:55:49 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:55:53 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 3552899661, seq 4
Jul 16 10:55:53 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:56:00 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 3552899661, seq 4
Jul 16 10:56:00 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:56:01 ruvds-wxkj6 CRON[4276]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:56:01 ruvds-wxkj6 CRON[4275]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:56:01 ruvds-wxkj6 CRON[4277]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:56:01 ruvds-wxkj6 CRON[4278]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:56:01 ruvds-wxkj6 CRON[4276]: pam_unix(cron:session): session closed for user root
Jul 16 10:56:01 ruvds-wxkj6 CRON[4275]: pam_unix(cron:session): session closed for user root
Jul 16 10:56:13 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 3552899661, seq 4
Jul 16 10:56:13 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:56:37 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 3552899661, seq 4
Jul 16 10:56:37 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:57:01 ruvds-wxkj6 CRON[4282]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:57:01 ruvds-wxkj6 CRON[4281]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:57:01 ruvds-wxkj6 CRON[4283]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:57:01 ruvds-wxkj6 CRON[4284]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:57:01 ruvds-wxkj6 CRON[4282]: pam_unix(cron:session): session closed for user root
Jul 16 10:57:01 ruvds-wxkj6 CRON[4281]: pam_unix(cron:session): session closed for user root
Jul 16 10:57:19 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 3552899661, seq 4
Jul 16 10:57:19 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:57:55 ruvds-wxkj6 sshd[4287]: error: kex_exchange_identification: Connection closed by remote host
Jul 16 10:57:55 ruvds-wxkj6 sshd[4287]: Connection closed by 45.161.99.89 port 49724
Jul 16 10:58:01 ruvds-wxkj6 CRON[4289]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:58:01 ruvds-wxkj6 CRON[4288]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:58:01 ruvds-wxkj6 CRON[4290]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:58:01 ruvds-wxkj6 CRON[4291]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:58:01 ruvds-wxkj6 CRON[4289]: pam_unix(cron:session): session closed for user root
Jul 16 10:58:01 ruvds-wxkj6 CRON[4288]: pam_unix(cron:session): session closed for user root
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xc391d2d6/194.87.101.244
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xc391d2d6/194.87.101.244 not found for delete
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[61] to 84.201.157.25
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[61] to 84.201.157.25
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[ENC] could not decrypt payloads
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[IKE] message parsing failed
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[IKE] ignore malformed INFORMATIONAL request
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[IKE] INFORMATIONAL_V1 request with message ID 4076657254 processing failed
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[61] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[61] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 3791537174 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 10:58:34 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:58:38 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 3791537174, seq 4
Jul 16 10:58:38 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:58:46 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 2 of request message ID 3791537174, seq 4
Jul 16 10:58:46 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:58:54 ruvds-wxkj6 sshd[4297]: error: kex_exchange_identification: Connection closed by remote host
Jul 16 10:58:54 ruvds-wxkj6 sshd[4297]: Connection closed by 45.161.99.89 port 54350
Jul 16 10:58:56 ruvds-wxkj6 sshd[4298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.161.99.89  user=root
Jul 16 10:58:58 ruvds-wxkj6 sshd[4298]: Failed password for root from 45.161.99.89 port 54358 ssh2
Jul 16 10:58:58 ruvds-wxkj6 sshd[4298]: Connection closed by authenticating user root 45.161.99.89 port 54358 [preauth]
Jul 16 10:58:59 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 3791537174, seq 4
Jul 16 10:58:59 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 10:59:00 ruvds-wxkj6 sshd[4300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.161.99.89  user=root
Jul 16 10:59:01 ruvds-wxkj6 sshd[4300]: Failed password for root from 45.161.99.89 port 54370 ssh2
Jul 16 10:59:01 ruvds-wxkj6 CRON[4303]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:59:01 ruvds-wxkj6 CRON[4304]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 10:59:02 ruvds-wxkj6 CRON[4303]: pam_unix(cron:session): session closed for user root
Jul 16 10:59:02 ruvds-wxkj6 CRON[4302]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 10:59:02 ruvds-wxkj6 CRON[4306]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 10:59:02 ruvds-wxkj6 CRON[4302]: pam_unix(cron:session): session closed for user root
Jul 16 10:59:02 ruvds-wxkj6 sshd[4300]: Connection closed by authenticating user root 45.161.99.89 port 54370 [preauth]
Jul 16 10:59:04 ruvds-wxkj6 sshd[4308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.161.99.89  user=root
Jul 16 10:59:06 ruvds-wxkj6 sshd[4308]: Failed password for root from 45.161.99.89 port 54374 ssh2
Jul 16 10:59:07 ruvds-wxkj6 sshd[4308]: Connection closed by authenticating user root 45.161.99.89 port 54374 [preauth]
Jul 16 10:59:08 ruvds-wxkj6 sshd[4310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.161.99.89  user=root
Jul 16 10:59:10 ruvds-wxkj6 sshd[4310]: Failed password for root from 45.161.99.89 port 60986 ssh2
Jul 16 10:59:11 ruvds-wxkj6 sshd[4310]: Connection closed by authenticating user root 45.161.99.89 port 60986 [preauth]
Jul 16 10:59:12 ruvds-wxkj6 sshd[4313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.161.99.89  user=root
Jul 16 10:59:13 ruvds-wxkj6 sshd[4313]: Failed password for root from 45.161.99.89 port 32768 ssh2
Jul 16 10:59:22 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 3791537174, seq 4
Jul 16 10:59:22 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4327]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4328]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4329]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4330]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4325]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4323]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4322]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4324]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4326]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4321]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4331]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4332]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4333]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4334]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4335]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4336]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4337]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4338]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr addon/srvmon >/dev/null 2>&1)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4339]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/scheduler.php    >> /usr/local/mgr5/var/raisp_data/log/raisp_scheduler.log   2>&1)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4320]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4327]: pam_unix(cron:session): session closed for user root
Jul 16 11:00:01 ruvds-wxkj6 CRON[4328]: pam_unix(cron:session): session closed for user root
Jul 16 11:00:01 ruvds-wxkj6 CRON[4325]: pam_unix(cron:session): session closed for user root
Jul 16 11:00:01 ruvds-wxkj6 CRON[4326]: pam_unix(cron:session): session closed for user root
Jul 16 11:00:01 ruvds-wxkj6 CRON[4347]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4348]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 11:00:01 ruvds-wxkj6 CRON[4324]: pam_unix(cron:session): session closed for user root
Jul 16 11:00:01 ruvds-wxkj6 CRON[4320]: pam_unix(cron:session): session closed for user www-data
Jul 16 11:00:01 ruvds-wxkj6 CRON[4329]: pam_unix(cron:session): session closed for user root
Jul 16 11:00:01 ruvds-wxkj6 CRON[4330]: pam_unix(cron:session): session closed for user root
Jul 16 11:00:01 ruvds-wxkj6 CRON[4322]: pam_unix(cron:session): session closed for user root
Jul 16 11:00:01 ruvds-wxkj6 CRON[4323]: pam_unix(cron:session): session closed for user root
Jul 16 11:00:01 ruvds-wxkj6 CRON[4321]: pam_unix(cron:session): session closed for user root
Jul 16 11:00:04 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 3791537174, seq 4
Jul 16 11:00:04 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:01:01 ruvds-wxkj6 CRON[4374]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:01:01 ruvds-wxkj6 CRON[4373]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:01:01 ruvds-wxkj6 CRON[4375]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:01:01 ruvds-wxkj6 CRON[4376]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:01:01 ruvds-wxkj6 CRON[4374]: pam_unix(cron:session): session closed for user root
Jul 16 11:01:01 ruvds-wxkj6 CRON[4373]: pam_unix(cron:session): session closed for user root
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xc48395b7/194.87.101.244
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xc48395b7/194.87.101.244 not found for delete
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 16[IKE] giving up after 5 retransmits
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[62] to 84.201.157.25
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[62] to 84.201.157.25
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 07[IKE] received DPD vendor ID
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 07[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 07[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:01:19 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 3107754956 processing failed
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[62] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[62] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 3826360555 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:01:20 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:01:24 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 3826360555, seq 4
Jul 16 11:01:24 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:01:31 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 3826360555, seq 4
Jul 16 11:01:31 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:01:44 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 3826360555, seq 4
Jul 16 11:01:44 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:01:50 ruvds-wxkj6 sshd[4381]: Connection closed by 167.94.138.63 port 46594 [preauth]
Jul 16 11:02:01 ruvds-wxkj6 CRON[4384]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:02:01 ruvds-wxkj6 CRON[4383]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:02:01 ruvds-wxkj6 CRON[4385]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:02:01 ruvds-wxkj6 CRON[4386]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:02:01 ruvds-wxkj6 CRON[4384]: pam_unix(cron:session): session closed for user root
Jul 16 11:02:01 ruvds-wxkj6 CRON[4383]: pam_unix(cron:session): session closed for user root
Jul 16 11:02:07 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 3826360555, seq 4
Jul 16 11:02:07 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:02:23 ruvds-wxkj6 sshd[4389]: Unable to negotiate with 61.177.173.41 port 40094: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Jul 16 11:02:49 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 3826360555, seq 4
Jul 16 11:02:49 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:03:01 ruvds-wxkj6 CRON[4392]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:03:01 ruvds-wxkj6 CRON[4391]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:03:01 ruvds-wxkj6 CRON[4393]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:03:01 ruvds-wxkj6 CRON[4394]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:03:01 ruvds-wxkj6 CRON[4392]: pam_unix(cron:session): session closed for user root
Jul 16 11:03:01 ruvds-wxkj6 CRON[4391]: pam_unix(cron:session): session closed for user root
Jul 16 11:04:01 ruvds-wxkj6 CRON[4398]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:04:01 ruvds-wxkj6 CRON[4397]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:04:01 ruvds-wxkj6 CRON[4399]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:04:01 ruvds-wxkj6 CRON[4400]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:04:01 ruvds-wxkj6 CRON[4398]: pam_unix(cron:session): session closed for user root
Jul 16 11:04:01 ruvds-wxkj6 CRON[4397]: pam_unix(cron:session): session closed for user root
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xc325e9ef/194.87.101.244
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xc325e9ef/194.87.101.244 not found for delete
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[63] to 84.201.157.25
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[63] to 84.201.157.25
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 3247464847 processing failed
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[63] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[63] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 4254957543 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:04:05 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:04:09 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 4254957543, seq 4
Jul 16 11:04:09 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:04:16 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 4254957543, seq 4
Jul 16 11:04:16 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:04:29 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 4254957543, seq 4
Jul 16 11:04:29 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:04:42 ruvds-wxkj6 sshd[4405]: Connection closed by authenticating user root 50.233.200.19 port 56494 [preauth]
Jul 16 11:04:52 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 4254957543, seq 4
Jul 16 11:04:52 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:04:57 ruvds-wxkj6 sshd[4407]: Connection closed by 174.83.46.185 port 40727 [preauth]
Jul 16 11:05:01 ruvds-wxkj6 CRON[4416]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4413]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4412]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4410]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4415]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4411]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4414]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4417]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4418]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4419]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4420]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4409]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4421]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4422]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4414]: pam_unix(cron:session): session closed for user root
Jul 16 11:05:01 ruvds-wxkj6 CRON[4425]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4413]: pam_unix(cron:session): session closed for user root
Jul 16 11:05:01 ruvds-wxkj6 CRON[4412]: pam_unix(cron:session): session closed for user root
Jul 16 11:05:01 ruvds-wxkj6 CRON[4411]: pam_unix(cron:session): session closed for user root
Jul 16 11:05:01 ruvds-wxkj6 CRON[4435]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:05:01 ruvds-wxkj6 CRON[4415]: pam_unix(cron:session): session closed for user root
Jul 16 11:05:01 ruvds-wxkj6 CRON[4416]: pam_unix(cron:session): session closed for user root
Jul 16 11:05:01 ruvds-wxkj6 CRON[4410]: pam_unix(cron:session): session closed for user root
Jul 16 11:05:01 ruvds-wxkj6 CRON[4409]: pam_unix(cron:session): session closed for user root
Jul 16 11:05:34 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 4254957543, seq 4
Jul 16 11:05:34 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:06:01 ruvds-wxkj6 CRON[4448]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:06:01 ruvds-wxkj6 CRON[4449]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:06:01 ruvds-wxkj6 CRON[4450]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:06:01 ruvds-wxkj6 CRON[4451]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:06:01 ruvds-wxkj6 CRON[4449]: pam_unix(cron:session): session closed for user root
Jul 16 11:06:01 ruvds-wxkj6 CRON[4448]: pam_unix(cron:session): session closed for user root
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xc03f08e9/194.87.101.244
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xc03f08e9/194.87.101.244 not found for delete
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[64] to 84.201.157.25
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[64] to 84.201.157.25
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 3708736068 processing failed
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[64] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[64] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 2326706482 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:06:50 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:06:54 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 2326706482, seq 4
Jul 16 11:06:54 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:07:01 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 2326706482, seq 4
Jul 16 11:07:01 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:07:01 ruvds-wxkj6 CRON[4455]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:07:01 ruvds-wxkj6 CRON[4456]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:07:01 ruvds-wxkj6 CRON[4457]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:07:01 ruvds-wxkj6 CRON[4458]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:07:01 ruvds-wxkj6 CRON[4456]: pam_unix(cron:session): session closed for user root
Jul 16 11:07:01 ruvds-wxkj6 CRON[4455]: pam_unix(cron:session): session closed for user root
Jul 16 11:07:14 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 2326706482, seq 4
Jul 16 11:07:14 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:07:37 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 2326706482, seq 4
Jul 16 11:07:37 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:08:01 ruvds-wxkj6 CRON[4463]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:08:01 ruvds-wxkj6 CRON[4462]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:08:01 ruvds-wxkj6 CRON[4464]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:08:01 ruvds-wxkj6 CRON[4465]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:08:01 ruvds-wxkj6 CRON[4463]: pam_unix(cron:session): session closed for user root
Jul 16 11:08:02 ruvds-wxkj6 CRON[4462]: pam_unix(cron:session): session closed for user root
Jul 16 11:08:19 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 2326706482, seq 4
Jul 16 11:08:19 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:09:01 ruvds-wxkj6 CRON[4470]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:09:01 ruvds-wxkj6 CRON[4468]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:09:01 ruvds-wxkj6 CRON[4469]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:09:01 ruvds-wxkj6 CRON[4471]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:09:01 ruvds-wxkj6 CRON[4472]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:09:01 ruvds-wxkj6 CRON[4473]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jul 16 11:09:01 ruvds-wxkj6 CRON[4470]: pam_unix(cron:session): session closed for user root
Jul 16 11:09:01 ruvds-wxkj6 CRON[4468]: pam_unix(cron:session): session closed for user root
Jul 16 11:09:01 ruvds-wxkj6 CRON[4469]: pam_unix(cron:session): session closed for user root
Jul 16 11:09:01 ruvds-wxkj6 systemd[1]: Starting Clean php session files...
Jul 16 11:09:03 ruvds-wxkj6 systemd[1]: phpsessionclean.service: Succeeded.
Jul 16 11:09:03 ruvds-wxkj6 systemd[1]: Finished Clean php session files.
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xc294d11d/194.87.101.244
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xc294d11d/194.87.101.244 not found for delete
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[65] to 84.201.157.25
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[65] to 84.201.157.25
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[ENC] could not decrypt payloads
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[IKE] message parsing failed
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[IKE] INFORMATIONAL_V1 request with message ID 2304713557 processing failed
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[65] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[65] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 3839812159 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:09:35 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:09:39 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 3839812159, seq 4
Jul 16 11:09:39 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:09:46 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 2 of request message ID 3839812159, seq 4
Jul 16 11:09:46 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:09:59 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 3839812159, seq 4
Jul 16 11:09:59 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4567]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4566]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4563]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4562]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4569]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4564]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4568]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4565]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4570]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4572]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4571]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4573]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4574]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4575]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4577]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4564]: pam_unix(cron:session): session closed for user root
Jul 16 11:10:01 ruvds-wxkj6 CRON[4565]: pam_unix(cron:session): session closed for user root
Jul 16 11:10:01 ruvds-wxkj6 CRON[4561]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4566]: pam_unix(cron:session): session closed for user root
Jul 16 11:10:01 ruvds-wxkj6 CRON[4567]: pam_unix(cron:session): session closed for user root
Jul 16 11:10:01 ruvds-wxkj6 CRON[4585]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4587]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 11:10:01 ruvds-wxkj6 CRON[4561]: pam_unix(cron:session): session closed for user www-data
Jul 16 11:10:01 ruvds-wxkj6 CRON[4568]: pam_unix(cron:session): session closed for user root
Jul 16 11:10:01 ruvds-wxkj6 CRON[4569]: pam_unix(cron:session): session closed for user root
Jul 16 11:10:01 ruvds-wxkj6 CRON[4563]: pam_unix(cron:session): session closed for user root
Jul 16 11:10:01 ruvds-wxkj6 CRON[4562]: pam_unix(cron:session): session closed for user root
Jul 16 11:10:22 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 3839812159, seq 4
Jul 16 11:10:22 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:11:01 ruvds-wxkj6 CRON[4606]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:11:01 ruvds-wxkj6 CRON[4607]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:11:01 ruvds-wxkj6 CRON[4608]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:11:01 ruvds-wxkj6 CRON[4609]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:11:01 ruvds-wxkj6 CRON[4607]: pam_unix(cron:session): session closed for user root
Jul 16 11:11:01 ruvds-wxkj6 CRON[4606]: pam_unix(cron:session): session closed for user root
Jul 16 11:11:04 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 3839812159, seq 4
Jul 16 11:11:04 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:12:01 ruvds-wxkj6 CRON[4613]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:12:01 ruvds-wxkj6 CRON[4614]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:12:01 ruvds-wxkj6 CRON[4615]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:12:01 ruvds-wxkj6 CRON[4616]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:12:01 ruvds-wxkj6 CRON[4614]: pam_unix(cron:session): session closed for user root
Jul 16 11:12:01 ruvds-wxkj6 CRON[4613]: pam_unix(cron:session): session closed for user root
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xc8418b5e/194.87.101.244
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xc8418b5e/194.87.101.244 not found for delete
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 16[IKE] giving up after 5 retransmits
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[66] to 84.201.157.25
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[66] to 84.201.157.25
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 07[IKE] received DPD vendor ID
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 07[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 07[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 3109241531 processing failed
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[66] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[66] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 4281447457 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:12:20 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:12:24 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 4281447457, seq 4
Jul 16 11:12:24 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:12:31 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 4281447457, seq 4
Jul 16 11:12:31 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:12:40 ruvds-wxkj6 sshd[4620]: Invalid user admin from 220.132.163.19 port 58194
Jul 16 11:12:40 ruvds-wxkj6 sshd[4620]: Failed none for invalid user admin from 220.132.163.19 port 58194 ssh2
Jul 16 11:12:41 ruvds-wxkj6 sshd[4620]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 11:12:41 ruvds-wxkj6 sshd[4620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.132.163.19
Jul 16 11:12:43 ruvds-wxkj6 sshd[4620]: Failed password for invalid user admin from 220.132.163.19 port 58194 ssh2
Jul 16 11:12:43 ruvds-wxkj6 sshd[4620]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 11:12:44 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 4281447457, seq 4
Jul 16 11:12:44 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:12:45 ruvds-wxkj6 sshd[4620]: Failed password for invalid user admin from 220.132.163.19 port 58194 ssh2
Jul 16 11:12:46 ruvds-wxkj6 sshd[4620]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 11:12:49 ruvds-wxkj6 sshd[4620]: Failed password for invalid user admin from 220.132.163.19 port 58194 ssh2
Jul 16 11:13:01 ruvds-wxkj6 CRON[4628]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:13:01 ruvds-wxkj6 CRON[4627]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:13:01 ruvds-wxkj6 CRON[4629]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:13:01 ruvds-wxkj6 CRON[4630]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:13:01 ruvds-wxkj6 CRON[4628]: pam_unix(cron:session): session closed for user root
Jul 16 11:13:01 ruvds-wxkj6 CRON[4627]: pam_unix(cron:session): session closed for user root
Jul 16 11:13:08 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 4281447457, seq 4
Jul 16 11:13:08 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:13:50 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 4281447457, seq 4
Jul 16 11:13:50 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:14:01 ruvds-wxkj6 CRON[4634]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:14:01 ruvds-wxkj6 CRON[4633]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:14:01 ruvds-wxkj6 CRON[4635]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:14:01 ruvds-wxkj6 CRON[4636]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:14:01 ruvds-wxkj6 CRON[4634]: pam_unix(cron:session): session closed for user root
Jul 16 11:14:02 ruvds-wxkj6 CRON[4633]: pam_unix(cron:session): session closed for user root
Jul 16 11:15:01 ruvds-wxkj6 CRON[4647]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4641]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4645]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4642]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4643]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4640]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4646]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4649]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4650]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4651]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4644]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4652]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4653]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr addon/srvmon >/dev/null 2>&1)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4648]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4643]: pam_unix(cron:session): session closed for user root
Jul 16 11:15:01 ruvds-wxkj6 CRON[4645]: pam_unix(cron:session): session closed for user root
Jul 16 11:15:01 ruvds-wxkj6 CRON[4656]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4642]: pam_unix(cron:session): session closed for user root
Jul 16 11:15:01 ruvds-wxkj6 CRON[4646]: pam_unix(cron:session): session closed for user root
Jul 16 11:15:01 ruvds-wxkj6 CRON[4660]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4661]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4664]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:15:01 ruvds-wxkj6 CRON[4644]: pam_unix(cron:session): session closed for user root
Jul 16 11:15:01 ruvds-wxkj6 CRON[4641]: pam_unix(cron:session): session closed for user root
Jul 16 11:15:01 ruvds-wxkj6 CRON[4640]: pam_unix(cron:session): session closed for user root
Jul 16 11:15:01 ruvds-wxkj6 CRON[4647]: pam_unix(cron:session): session closed for user root
Jul 16 11:15:01 ruvds-wxkj6 CRON[4648]: pam_unix(cron:session): session closed for user root
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xcacb23ae/194.87.101.244
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xcacb23ae/194.87.101.244 not found for delete
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[67] to 84.201.157.25
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[67] to 84.201.157.25
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 394551249 processing failed
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[67] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[67] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 2462227083 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:15:05 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:15:09 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 2462227083, seq 4
Jul 16 11:15:09 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:15:16 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 2462227083, seq 4
Jul 16 11:15:16 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:15:29 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 2462227083, seq 4
Jul 16 11:15:29 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:15:53 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 2462227083, seq 4
Jul 16 11:15:53 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:16:01 ruvds-wxkj6 CRON[4681]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:16:01 ruvds-wxkj6 CRON[4680]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:16:01 ruvds-wxkj6 CRON[4682]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:16:01 ruvds-wxkj6 CRON[4683]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:16:01 ruvds-wxkj6 CRON[4681]: pam_unix(cron:session): session closed for user root
Jul 16 11:16:01 ruvds-wxkj6 CRON[4680]: pam_unix(cron:session): session closed for user root
Jul 16 11:16:07 ruvds-wxkj6 sshd[4686]: Unable to negotiate with 61.177.172.60 port 64116: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Jul 16 11:16:35 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 2462227083, seq 4
Jul 16 11:16:35 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:17:01 ruvds-wxkj6 CRON[4689]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:17:01 ruvds-wxkj6 CRON[4690]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:17:01 ruvds-wxkj6 CRON[4688]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:17:01 ruvds-wxkj6 CRON[4691]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:17:01 ruvds-wxkj6 CRON[4692]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:17:01 ruvds-wxkj6 CRON[4693]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jul 16 11:17:01 ruvds-wxkj6 CRON[4690]: pam_unix(cron:session): session closed for user root
Jul 16 11:17:01 ruvds-wxkj6 CRON[4689]: pam_unix(cron:session): session closed for user root
Jul 16 11:17:01 ruvds-wxkj6 CRON[4688]: pam_unix(cron:session): session closed for user root
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xcc511179/194.87.101.244
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xcc511179/194.87.101.244 not found for delete
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[68] to 84.201.157.25
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[68] to 84.201.157.25
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 1995665342 processing failed
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[68] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[68] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 190356060 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:17:50 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:17:54 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 190356060, seq 4
Jul 16 11:17:54 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:18:01 ruvds-wxkj6 CRON[4699]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:18:01 ruvds-wxkj6 CRON[4698]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:18:01 ruvds-wxkj6 CRON[4700]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:18:01 ruvds-wxkj6 CRON[4701]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:18:01 ruvds-wxkj6 CRON[4699]: pam_unix(cron:session): session closed for user root
Jul 16 11:18:01 ruvds-wxkj6 CRON[4698]: pam_unix(cron:session): session closed for user root
Jul 16 11:18:01 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 190356060, seq 4
Jul 16 11:18:01 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:18:14 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 190356060, seq 4
Jul 16 11:18:14 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:18:38 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 190356060, seq 4
Jul 16 11:18:38 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:19:01 ruvds-wxkj6 CRON[4705]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:19:01 ruvds-wxkj6 CRON[4704]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:19:01 ruvds-wxkj6 CRON[4706]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:19:01 ruvds-wxkj6 CRON[4707]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:19:01 ruvds-wxkj6 CRON[4705]: pam_unix(cron:session): session closed for user root
Jul 16 11:19:01 ruvds-wxkj6 CRON[4704]: pam_unix(cron:session): session closed for user root
Jul 16 11:19:20 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 190356060, seq 4
Jul 16 11:19:20 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:19:50 ruvds-wxkj6 sshd[4710]: error: kex_exchange_identification: Connection closed by remote host
Jul 16 11:19:50 ruvds-wxkj6 sshd[4710]: Connection closed by 45.61.188.170 port 38990
Jul 16 11:20:01 ruvds-wxkj6 CRON[4720]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4716]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4719]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4713]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4715]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4714]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4717]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4718]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4721]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4722]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4723]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4712]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4724]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4725]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4726]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4717]: pam_unix(cron:session): session closed for user root
Jul 16 11:20:01 ruvds-wxkj6 CRON[4729]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4718]: pam_unix(cron:session): session closed for user root
Jul 16 11:20:01 ruvds-wxkj6 CRON[4731]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4716]: pam_unix(cron:session): session closed for user root
Jul 16 11:20:01 ruvds-wxkj6 CRON[4715]: pam_unix(cron:session): session closed for user root
Jul 16 11:20:01 ruvds-wxkj6 CRON[4737]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 11:20:01 ruvds-wxkj6 CRON[4720]: pam_unix(cron:session): session closed for user root
Jul 16 11:20:01 ruvds-wxkj6 CRON[4719]: pam_unix(cron:session): session closed for user root
Jul 16 11:20:01 ruvds-wxkj6 CRON[4714]: pam_unix(cron:session): session closed for user root
Jul 16 11:20:01 ruvds-wxkj6 CRON[4713]: pam_unix(cron:session): session closed for user root
Jul 16 11:20:01 ruvds-wxkj6 CRON[4712]: pam_unix(cron:session): session closed for user www-data
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xc8d38c52/194.87.101.244
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xc8d38c52/194.87.101.244 not found for delete
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[69] to 84.201.157.25
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[69] to 84.201.157.25
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[ENC] could not decrypt payloads
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[IKE] message parsing failed
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[IKE] INFORMATIONAL_V1 request with message ID 3127677774 processing failed
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[69] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[69] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 3005903326 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:20:35 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:20:39 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 3005903326, seq 4
Jul 16 11:20:39 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:20:47 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 2 of request message ID 3005903326, seq 4
Jul 16 11:20:47 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:21:00 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 3005903326, seq 4
Jul 16 11:21:00 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:21:01 ruvds-wxkj6 CRON[4759]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:21:01 ruvds-wxkj6 CRON[4758]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:21:01 ruvds-wxkj6 CRON[4760]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:21:01 ruvds-wxkj6 CRON[4761]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:21:01 ruvds-wxkj6 CRON[4759]: pam_unix(cron:session): session closed for user root
Jul 16 11:21:01 ruvds-wxkj6 CRON[4758]: pam_unix(cron:session): session closed for user root
Jul 16 11:21:23 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 3005903326, seq 4
Jul 16 11:21:23 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:22:02 ruvds-wxkj6 CRON[4765]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:22:02 ruvds-wxkj6 CRON[4766]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:22:02 ruvds-wxkj6 CRON[4767]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:22:02 ruvds-wxkj6 CRON[4768]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:22:02 ruvds-wxkj6 CRON[4766]: pam_unix(cron:session): session closed for user root
Jul 16 11:22:02 ruvds-wxkj6 CRON[4765]: pam_unix(cron:session): session closed for user root
Jul 16 11:22:05 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 3005903326, seq 4
Jul 16 11:22:05 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:23:01 ruvds-wxkj6 CRON[4777]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:23:01 ruvds-wxkj6 CRON[4778]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:23:01 ruvds-wxkj6 CRON[4776]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:23:01 ruvds-wxkj6 CRON[4777]: pam_unix(cron:session): session closed for user root
Jul 16 11:23:01 ruvds-wxkj6 CRON[4780]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:23:01 ruvds-wxkj6 CRON[4776]: pam_unix(cron:session): session closed for user root
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xc246db89/194.87.101.244
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xc246db89/194.87.101.244 not found for delete
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 16[IKE] giving up after 5 retransmits
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[70] to 84.201.157.25
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[70] to 84.201.157.25
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 07[IKE] received DPD vendor ID
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 07[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 07[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 3265275585 processing failed
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[70] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[70] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 394411323 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:23:20 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:23:24 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 394411323, seq 4
Jul 16 11:23:24 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:23:32 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 394411323, seq 4
Jul 16 11:23:32 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:23:45 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 394411323, seq 4
Jul 16 11:23:45 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:24:01 ruvds-wxkj6 CRON[4785]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:24:01 ruvds-wxkj6 CRON[4784]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:24:01 ruvds-wxkj6 CRON[4786]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:24:01 ruvds-wxkj6 CRON[4787]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:24:01 ruvds-wxkj6 CRON[4785]: pam_unix(cron:session): session closed for user root
Jul 16 11:24:01 ruvds-wxkj6 CRON[4784]: pam_unix(cron:session): session closed for user root
Jul 16 11:24:08 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 394411323, seq 4
Jul 16 11:24:08 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:24:50 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 394411323, seq 4
Jul 16 11:24:50 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4796]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4798]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4792]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4791]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4794]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4795]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4797]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4806]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4807]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4790]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4808]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4809]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4792]: pam_unix(cron:session): session closed for user root
Jul 16 11:25:01 ruvds-wxkj6 CRON[4812]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4794]: pam_unix(cron:session): session closed for user root
Jul 16 11:25:01 ruvds-wxkj6 CRON[4814]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4795]: pam_unix(cron:session): session closed for user root
Jul 16 11:25:01 ruvds-wxkj6 CRON[4793]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4823]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:25:01 ruvds-wxkj6 CRON[4793]: pam_unix(cron:session): session closed for user root
Jul 16 11:25:01 ruvds-wxkj6 CRON[4796]: pam_unix(cron:session): session closed for user root
Jul 16 11:25:01 ruvds-wxkj6 CRON[4797]: pam_unix(cron:session): session closed for user root
Jul 16 11:25:01 ruvds-wxkj6 CRON[4791]: pam_unix(cron:session): session closed for user root
Jul 16 11:25:01 ruvds-wxkj6 CRON[4790]: pam_unix(cron:session): session closed for user root
Jul 16 11:26:01 ruvds-wxkj6 CRON[4828]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:26:01 ruvds-wxkj6 CRON[4827]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:26:01 ruvds-wxkj6 CRON[4829]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:26:01 ruvds-wxkj6 CRON[4830]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:26:01 ruvds-wxkj6 CRON[4828]: pam_unix(cron:session): session closed for user root
Jul 16 11:26:01 ruvds-wxkj6 CRON[4827]: pam_unix(cron:session): session closed for user root
Jul 16 11:26:05 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xcbe59ffa/194.87.101.244
Jul 16 11:26:05 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xcbe59ffa/194.87.101.244 not found for delete
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[71] to 84.201.157.25
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[71] to 84.201.157.25
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 1436269506 processing failed
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[71] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[71] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 3351186863 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:26:06 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:26:10 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 3351186863, seq 4
Jul 16 11:26:10 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:26:17 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 3351186863, seq 4
Jul 16 11:26:17 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:26:30 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 3351186863, seq 4
Jul 16 11:26:30 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:26:53 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 3351186863, seq 4
Jul 16 11:26:53 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:27:01 ruvds-wxkj6 CRON[4834]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:27:01 ruvds-wxkj6 CRON[4835]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:27:01 ruvds-wxkj6 CRON[4836]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:27:01 ruvds-wxkj6 CRON[4837]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:27:01 ruvds-wxkj6 CRON[4835]: pam_unix(cron:session): session closed for user root
Jul 16 11:27:01 ruvds-wxkj6 CRON[4834]: pam_unix(cron:session): session closed for user root
Jul 16 11:27:35 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 3351186863, seq 4
Jul 16 11:27:35 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:28:01 ruvds-wxkj6 CRON[4841]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:28:01 ruvds-wxkj6 CRON[4840]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:28:01 ruvds-wxkj6 CRON[4842]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:28:01 ruvds-wxkj6 CRON[4843]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:28:01 ruvds-wxkj6 CRON[4841]: pam_unix(cron:session): session closed for user root
Jul 16 11:28:01 ruvds-wxkj6 CRON[4840]: pam_unix(cron:session): session closed for user root
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xc1ad6e55/194.87.101.244
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xc1ad6e55/194.87.101.244 not found for delete
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[72] to 84.201.157.25
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[72] to 84.201.157.25
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 3018751065 processing failed
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[72] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[72] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 1207232327 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:28:51 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:28:55 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 1207232327, seq 4
Jul 16 11:28:55 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:29:01 ruvds-wxkj6 CRON[4848]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:29:01 ruvds-wxkj6 CRON[4847]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:29:01 ruvds-wxkj6 CRON[4849]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:29:01 ruvds-wxkj6 CRON[4850]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:29:01 ruvds-wxkj6 CRON[4848]: pam_unix(cron:session): session closed for user root
Jul 16 11:29:01 ruvds-wxkj6 CRON[4847]: pam_unix(cron:session): session closed for user root
Jul 16 11:29:02 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 1207232327, seq 4
Jul 16 11:29:02 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:29:15 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 1207232327, seq 4
Jul 16 11:29:15 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:29:30 ruvds-wxkj6 sshd[4853]: Unable to negotiate with 61.177.172.160 port 26448: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Jul 16 11:29:38 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 1207232327, seq 4
Jul 16 11:29:38 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:29:39 ruvds-wxkj6 named[441]: client @0x7f51ac63aa98 167.94.138.104#33563 (ip.parrotdns.com): query (cache) 'ip.parrotdns.com/A/IN' denied
Jul 16 11:29:39 ruvds-wxkj6 named[441]: client @0x7f51ac63aa98 167.94.138.62#45356 (ip.parrotdns.com): query (cache) 'ip.parrotdns.com/A/IN' denied
Jul 16 11:30:01 ruvds-wxkj6 CRON[4860]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4858]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4857]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4861]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4855]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4856]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4859]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4862]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4863]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4864]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4865]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4866]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4867]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4868]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4869]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4870]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4871]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4872]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4873]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr addon/srvmon >/dev/null 2>&1)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4861]: pam_unix(cron:session): session closed for user root
Jul 16 11:30:01 ruvds-wxkj6 CRON[4860]: pam_unix(cron:session): session closed for user root
Jul 16 11:30:01 ruvds-wxkj6 CRON[4859]: pam_unix(cron:session): session closed for user root
Jul 16 11:30:01 ruvds-wxkj6 CRON[4862]: pam_unix(cron:session): session closed for user root
Jul 16 11:30:01 ruvds-wxkj6 CRON[4881]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 11:30:01 ruvds-wxkj6 CRON[4858]: pam_unix(cron:session): session closed for user root
Jul 16 11:30:01 ruvds-wxkj6 CRON[4855]: pam_unix(cron:session): session closed for user www-data
Jul 16 11:30:01 ruvds-wxkj6 CRON[4863]: pam_unix(cron:session): session closed for user root
Jul 16 11:30:01 ruvds-wxkj6 CRON[4864]: pam_unix(cron:session): session closed for user root
Jul 16 11:30:01 ruvds-wxkj6 CRON[4856]: pam_unix(cron:session): session closed for user root
Jul 16 11:30:01 ruvds-wxkj6 CRON[4857]: pam_unix(cron:session): session closed for user root
Jul 16 11:30:20 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 1207232327, seq 4
Jul 16 11:30:20 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:31:01 ruvds-wxkj6 CRON[4908]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:31:01 ruvds-wxkj6 CRON[4909]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:31:01 ruvds-wxkj6 CRON[4910]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:31:01 ruvds-wxkj6 CRON[4911]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:31:01 ruvds-wxkj6 CRON[4909]: pam_unix(cron:session): session closed for user root
Jul 16 11:31:01 ruvds-wxkj6 CRON[4908]: pam_unix(cron:session): session closed for user root
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xc8e637a6/194.87.101.244
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xc8e637a6/194.87.101.244 not found for delete
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[73] to 84.201.157.25
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[73] to 84.201.157.25
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[ENC] could not decrypt payloads
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[IKE] message parsing failed
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[IKE] INFORMATIONAL_V1 request with message ID 3819117711 processing failed
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[73] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[73] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 1571807823 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:31:36 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:31:40 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 1571807823, seq 4
Jul 16 11:31:40 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:31:47 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 2 of request message ID 1571807823, seq 4
Jul 16 11:31:47 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:32:00 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 1571807823, seq 4
Jul 16 11:32:00 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:32:01 ruvds-wxkj6 CRON[4916]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:32:01 ruvds-wxkj6 CRON[4915]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:32:01 ruvds-wxkj6 CRON[4917]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:32:01 ruvds-wxkj6 CRON[4918]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:32:01 ruvds-wxkj6 CRON[4916]: pam_unix(cron:session): session closed for user root
Jul 16 11:32:02 ruvds-wxkj6 CRON[4915]: pam_unix(cron:session): session closed for user root
Jul 16 11:32:23 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 1571807823, seq 4
Jul 16 11:32:23 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:33:01 ruvds-wxkj6 CRON[4923]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:33:01 ruvds-wxkj6 CRON[4922]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:33:01 ruvds-wxkj6 CRON[4924]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:33:01 ruvds-wxkj6 CRON[4925]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:33:01 ruvds-wxkj6 CRON[4923]: pam_unix(cron:session): session closed for user root
Jul 16 11:33:01 ruvds-wxkj6 CRON[4922]: pam_unix(cron:session): session closed for user root
Jul 16 11:33:05 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 1571807823, seq 4
Jul 16 11:33:05 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:34:01 ruvds-wxkj6 CRON[4929]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:34:01 ruvds-wxkj6 CRON[4928]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:34:01 ruvds-wxkj6 CRON[4930]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:34:01 ruvds-wxkj6 CRON[4931]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:34:01 ruvds-wxkj6 CRON[4929]: pam_unix(cron:session): session closed for user root
Jul 16 11:34:01 ruvds-wxkj6 CRON[4928]: pam_unix(cron:session): session closed for user root
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xcbb5b00a/194.87.101.244
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xcbb5b00a/194.87.101.244 not found for delete
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 16[IKE] giving up after 5 retransmits
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[74] to 84.201.157.25
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[74] to 84.201.157.25
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 07[IKE] received DPD vendor ID
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 07[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 07[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 2858226825 processing failed
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[74] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[74] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 1031427061 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:34:21 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:34:25 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 1031427061, seq 4
Jul 16 11:34:25 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:34:32 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 1031427061, seq 4
Jul 16 11:34:32 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:34:45 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 1031427061, seq 4
Jul 16 11:34:45 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4942]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4940]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4939]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4938]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4937]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4936]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4941]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4943]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4944]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4945]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4946]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4947]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4948]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4935]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4939]: pam_unix(cron:session): session closed for user root
Jul 16 11:35:01 ruvds-wxkj6 CRON[4951]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4938]: pam_unix(cron:session): session closed for user root
Jul 16 11:35:01 ruvds-wxkj6 CRON[4940]: pam_unix(cron:session): session closed for user root
Jul 16 11:35:01 ruvds-wxkj6 CRON[4937]: pam_unix(cron:session): session closed for user root
Jul 16 11:35:01 ruvds-wxkj6 CRON[4958]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:35:01 ruvds-wxkj6 CRON[4942]: pam_unix(cron:session): session closed for user root
Jul 16 11:35:01 ruvds-wxkj6 CRON[4941]: pam_unix(cron:session): session closed for user root
Jul 16 11:35:01 ruvds-wxkj6 CRON[4936]: pam_unix(cron:session): session closed for user root
Jul 16 11:35:01 ruvds-wxkj6 CRON[4935]: pam_unix(cron:session): session closed for user root
Jul 16 11:35:08 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 1031427061, seq 4
Jul 16 11:35:08 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:35:29 ruvds-wxkj6 sshd[4971]: Connection closed by 188.166.87.67 port 45018 [preauth]
Jul 16 11:35:50 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 1031427061, seq 4
Jul 16 11:35:50 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:36:01 ruvds-wxkj6 CRON[4973]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:36:01 ruvds-wxkj6 CRON[4974]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:36:01 ruvds-wxkj6 CRON[4975]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:36:01 ruvds-wxkj6 CRON[4976]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:36:01 ruvds-wxkj6 CRON[4974]: pam_unix(cron:session): session closed for user root
Jul 16 11:36:01 ruvds-wxkj6 CRON[4973]: pam_unix(cron:session): session closed for user root
Jul 16 11:36:10 ruvds-wxkj6 sshd[4980]: error: kex_exchange_identification: Connection closed by remote host
Jul 16 11:36:10 ruvds-wxkj6 sshd[4980]: Connection closed by 208.109.33.133 port 61000
Jul 16 11:37:01 ruvds-wxkj6 CRON[4981]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:37:01 ruvds-wxkj6 CRON[4982]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:37:01 ruvds-wxkj6 CRON[4983]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:37:01 ruvds-wxkj6 CRON[4984]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:37:01 ruvds-wxkj6 CRON[4982]: pam_unix(cron:session): session closed for user root
Jul 16 11:37:01 ruvds-wxkj6 CRON[4981]: pam_unix(cron:session): session closed for user root
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xc87e9ae5/194.87.101.244
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xc87e9ae5/194.87.101.244 not found for delete
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[75] to 84.201.157.25
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[75] to 84.201.157.25
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 2058425448 processing failed
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[75] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[IKE] IKE_SA vpnki-l2tp[75] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[ENC] generating QUICK_MODE request 3024622670 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:37:06 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:37:10 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 3024622670, seq 4
Jul 16 11:37:10 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:37:17 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 3024622670, seq 4
Jul 16 11:37:17 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:37:30 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 3024622670, seq 4
Jul 16 11:37:30 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:37:54 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 3024622670, seq 4
Jul 16 11:37:54 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:38:01 ruvds-wxkj6 CRON[4989]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:38:01 ruvds-wxkj6 CRON[4988]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:38:01 ruvds-wxkj6 CRON[4990]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:38:01 ruvds-wxkj6 CRON[4991]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:38:01 ruvds-wxkj6 CRON[4989]: pam_unix(cron:session): session closed for user root
Jul 16 11:38:01 ruvds-wxkj6 CRON[4988]: pam_unix(cron:session): session closed for user root
Jul 16 11:38:36 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 5 of request message ID 3024622670, seq 4
Jul 16 11:38:36 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:39:01 ruvds-wxkj6 systemd[1]: Starting Clean php session files...
Jul 16 11:39:01 ruvds-wxkj6 CRON[5008]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:39:01 ruvds-wxkj6 CRON[5007]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:39:01 ruvds-wxkj6 CRON[5009]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:39:01 ruvds-wxkj6 CRON[5010]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:39:01 ruvds-wxkj6 CRON[5011]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:39:01 ruvds-wxkj6 CRON[5012]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jul 16 11:39:01 ruvds-wxkj6 CRON[5007]: pam_unix(cron:session): session closed for user root
Jul 16 11:39:01 ruvds-wxkj6 CRON[5009]: pam_unix(cron:session): session closed for user root
Jul 16 11:39:01 ruvds-wxkj6 CRON[5008]: pam_unix(cron:session): session closed for user root
Jul 16 11:39:02 ruvds-wxkj6 systemd[1]: phpsessionclean.service: Succeeded.
Jul 16 11:39:02 ruvds-wxkj6 systemd[1]: Finished Clean php session files.
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xc05e34eb/194.87.101.244
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xc05e34eb/194.87.101.244 not found for delete
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[76] to 84.201.157.25
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[76] to 84.201.157.25
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 799733587 processing failed
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[76] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[76] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 9926717 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:39:51 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:39:55 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 9926717, seq 4
Jul 16 11:39:55 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5087]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5088]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5089]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5085]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5084]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5086]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5082]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5083]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5090]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5091]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5092]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5093]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5094]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5095]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5096]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5087]: pam_unix(cron:session): session closed for user root
Jul 16 11:40:01 ruvds-wxkj6 CRON[5085]: pam_unix(cron:session): session closed for user root
Jul 16 11:40:01 ruvds-wxkj6 CRON[5101]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5081]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5086]: pam_unix(cron:session): session closed for user root
Jul 16 11:40:01 ruvds-wxkj6 CRON[5084]: pam_unix(cron:session): session closed for user root
Jul 16 11:40:01 ruvds-wxkj6 CRON[5107]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 11:40:01 ruvds-wxkj6 CRON[5081]: pam_unix(cron:session): session closed for user www-data
Jul 16 11:40:01 ruvds-wxkj6 CRON[5088]: pam_unix(cron:session): session closed for user root
Jul 16 11:40:01 ruvds-wxkj6 CRON[5089]: pam_unix(cron:session): session closed for user root
Jul 16 11:40:01 ruvds-wxkj6 CRON[5082]: pam_unix(cron:session): session closed for user root
Jul 16 11:40:01 ruvds-wxkj6 CRON[5083]: pam_unix(cron:session): session closed for user root
Jul 16 11:40:02 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 9926717, seq 4
Jul 16 11:40:02 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:40:10 ruvds-wxkj6 named[441]: client @0x7f51ac63aa98 111.198.29.154#10516 (payoneer.com): query (cache) 'payoneer.com/TXT/IN' denied
Jul 16 11:40:15 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 9926717, seq 4
Jul 16 11:40:15 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:40:39 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 9926717, seq 4
Jul 16 11:40:39 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:41:01 ruvds-wxkj6 CRON[5127]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:41:01 ruvds-wxkj6 CRON[5126]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:41:01 ruvds-wxkj6 CRON[5128]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:41:01 ruvds-wxkj6 CRON[5129]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:41:01 ruvds-wxkj6 CRON[5127]: pam_unix(cron:session): session closed for user root
Jul 16 11:41:01 ruvds-wxkj6 CRON[5126]: pam_unix(cron:session): session closed for user root
Jul 16 11:41:21 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 9926717, seq 4
Jul 16 11:41:21 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:42:01 ruvds-wxkj6 CRON[5134]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:42:01 ruvds-wxkj6 CRON[5133]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:42:01 ruvds-wxkj6 CRON[5135]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:42:01 ruvds-wxkj6 CRON[5136]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:42:01 ruvds-wxkj6 CRON[5134]: pam_unix(cron:session): session closed for user root
Jul 16 11:42:01 ruvds-wxkj6 CRON[5133]: pam_unix(cron:session): session closed for user root
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 07[KNL] creating delete job for CHILD_SA ESP/0xc644d612/194.87.101.244
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 07[JOB] CHILD_SA ESP/0xc644d612/194.87.101.244 not found for delete
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[77] to 84.201.157.25
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[77] to 84.201.157.25
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[ENC] could not decrypt payloads
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[IKE] message parsing failed
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[IKE] INFORMATIONAL_V1 request with message ID 349137292 processing failed
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[77] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[77] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 1437614600 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:42:36 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:42:40 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 1437614600, seq 4
Jul 16 11:42:40 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:42:48 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 2 of request message ID 1437614600, seq 4
Jul 16 11:42:48 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:43:00 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 1437614600, seq 4
Jul 16 11:43:00 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:43:01 ruvds-wxkj6 CRON[5141]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:43:01 ruvds-wxkj6 CRON[5140]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:43:01 ruvds-wxkj6 CRON[5142]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:43:01 ruvds-wxkj6 CRON[5143]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:43:01 ruvds-wxkj6 CRON[5141]: pam_unix(cron:session): session closed for user root
Jul 16 11:43:01 ruvds-wxkj6 CRON[5140]: pam_unix(cron:session): session closed for user root
Jul 16 11:43:24 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 1437614600, seq 4
Jul 16 11:43:24 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:44:01 ruvds-wxkj6 CRON[5149]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:44:01 ruvds-wxkj6 CRON[5148]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:44:01 ruvds-wxkj6 CRON[5150]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:44:01 ruvds-wxkj6 CRON[5151]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:44:01 ruvds-wxkj6 CRON[5149]: pam_unix(cron:session): session closed for user root
Jul 16 11:44:01 ruvds-wxkj6 CRON[5148]: pam_unix(cron:session): session closed for user root
Jul 16 11:44:06 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 1437614600, seq 4
Jul 16 11:44:06 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:45:01 ruvds-wxkj6 CRON[5162]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5158]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5160]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5159]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5157]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5161]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5164]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5165]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5163]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5166]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5156]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5167]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5168]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5155]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5154]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5159]: pam_unix(cron:session): session closed for user root
Jul 16 11:45:02 ruvds-wxkj6 CRON[5157]: pam_unix(cron:session): session closed for user root
Jul 16 11:45:02 ruvds-wxkj6 CRON[5173]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5174]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr addon/srvmon >/dev/null 2>&1)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5160]: pam_unix(cron:session): session closed for user root
Jul 16 11:45:02 ruvds-wxkj6 CRON[5158]: pam_unix(cron:session): session closed for user root
Jul 16 11:45:02 ruvds-wxkj6 CRON[5175]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:45:02 ruvds-wxkj6 CRON[5156]: pam_unix(cron:session): session closed for user root
Jul 16 11:45:02 ruvds-wxkj6 CRON[5161]: pam_unix(cron:session): session closed for user root
Jul 16 11:45:02 ruvds-wxkj6 CRON[5162]: pam_unix(cron:session): session closed for user root
Jul 16 11:45:02 ruvds-wxkj6 CRON[5155]: pam_unix(cron:session): session closed for user root
Jul 16 11:45:02 ruvds-wxkj6 CRON[5154]: pam_unix(cron:session): session closed for user root
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xc67a3ad7/194.87.101.244
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xc67a3ad7/194.87.101.244 not found for delete
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 16[IKE] giving up after 5 retransmits
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[78] to 84.201.157.25
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 16[IKE] initiating Main Mode IKE_SA vpnki-l2tp[78] to 84.201.157.25
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 07[IKE] received DPD vendor ID
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 07[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 07[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 2898136801 processing failed
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[78] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[78] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 1382159634 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:45:21 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:45:25 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 1382159634, seq 4
Jul 16 11:45:25 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:45:33 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 1382159634, seq 4
Jul 16 11:45:33 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:45:46 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 1382159634, seq 4
Jul 16 11:45:46 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:46:01 ruvds-wxkj6 CRON[5195]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:46:01 ruvds-wxkj6 CRON[5194]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:46:01 ruvds-wxkj6 CRON[5196]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:46:01 ruvds-wxkj6 CRON[5197]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:46:01 ruvds-wxkj6 CRON[5195]: pam_unix(cron:session): session closed for user root
Jul 16 11:46:01 ruvds-wxkj6 CRON[5194]: pam_unix(cron:session): session closed for user root
Jul 16 11:46:09 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 4 of request message ID 1382159634, seq 4
Jul 16 11:46:09 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:46:51 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 1382159634, seq 4
Jul 16 11:46:51 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:47:01 ruvds-wxkj6 CRON[5201]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:47:01 ruvds-wxkj6 CRON[5202]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:47:01 ruvds-wxkj6 CRON[5203]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:47:01 ruvds-wxkj6 CRON[5204]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:47:01 ruvds-wxkj6 CRON[5202]: pam_unix(cron:session): session closed for user root
Jul 16 11:47:01 ruvds-wxkj6 CRON[5201]: pam_unix(cron:session): session closed for user root
Jul 16 11:48:01 ruvds-wxkj6 CRON[5207]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:48:01 ruvds-wxkj6 CRON[5208]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:48:01 ruvds-wxkj6 CRON[5209]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:48:01 ruvds-wxkj6 CRON[5210]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:48:01 ruvds-wxkj6 CRON[5208]: pam_unix(cron:session): session closed for user root
Jul 16 11:48:01 ruvds-wxkj6 CRON[5207]: pam_unix(cron:session): session closed for user root
Jul 16 11:48:06 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xc908e899/194.87.101.244
Jul 16 11:48:06 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xc908e899/194.87.101.244 not found for delete
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[79] to 84.201.157.25
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[79] to 84.201.157.25
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 16[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 16[ENC] could not decrypt payloads
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 16[IKE] message parsing failed
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 16[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 16[IKE] INFORMATIONAL_V1 request with message ID 1996951045 processing failed
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[79] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[79] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 07[ENC] generating QUICK_MODE request 1482444936 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:48:07 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:48:11 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 1482444936, seq 4
Jul 16 11:48:11 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:48:18 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 1482444936, seq 4
Jul 16 11:48:18 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:48:31 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 1482444936, seq 4
Jul 16 11:48:31 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:48:54 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 1482444936, seq 4
Jul 16 11:48:54 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:49:01 ruvds-wxkj6 CRON[5214]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:49:01 ruvds-wxkj6 CRON[5215]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:49:01 ruvds-wxkj6 CRON[5216]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:49:01 ruvds-wxkj6 CRON[5217]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:49:01 ruvds-wxkj6 CRON[5215]: pam_unix(cron:session): session closed for user root
Jul 16 11:49:01 ruvds-wxkj6 CRON[5214]: pam_unix(cron:session): session closed for user root
Jul 16 11:49:36 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 5 of request message ID 1482444936, seq 4
Jul 16 11:49:36 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5223]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5224]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5225]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5227]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5228]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5221]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5226]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5222]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5229]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5220]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5230]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5231]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5232]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5233]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5234]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5226]: pam_unix(cron:session): session closed for user root
Jul 16 11:50:01 ruvds-wxkj6 CRON[5237]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5238]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5235]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 11:50:01 ruvds-wxkj6 CRON[5225]: pam_unix(cron:session): session closed for user root
Jul 16 11:50:01 ruvds-wxkj6 CRON[5224]: pam_unix(cron:session): session closed for user root
Jul 16 11:50:01 ruvds-wxkj6 CRON[5223]: pam_unix(cron:session): session closed for user root
Jul 16 11:50:01 ruvds-wxkj6 CRON[5220]: pam_unix(cron:session): session closed for user www-data
Jul 16 11:50:01 ruvds-wxkj6 CRON[5227]: pam_unix(cron:session): session closed for user root
Jul 16 11:50:01 ruvds-wxkj6 CRON[5228]: pam_unix(cron:session): session closed for user root
Jul 16 11:50:01 ruvds-wxkj6 CRON[5221]: pam_unix(cron:session): session closed for user root
Jul 16 11:50:01 ruvds-wxkj6 CRON[5222]: pam_unix(cron:session): session closed for user root
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xc99740de/194.87.101.244
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xc99740de/194.87.101.244 not found for delete
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[80] to 84.201.157.25
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[80] to 84.201.157.25
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 838805047 processing failed
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[80] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[80] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 1579233917 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:50:52 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:50:56 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 1579233917, seq 4
Jul 16 11:50:56 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:51:01 ruvds-wxkj6 CRON[5267]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:51:01 ruvds-wxkj6 CRON[5266]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:51:01 ruvds-wxkj6 CRON[5268]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:51:01 ruvds-wxkj6 CRON[5269]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:51:01 ruvds-wxkj6 CRON[5267]: pam_unix(cron:session): session closed for user root
Jul 16 11:51:01 ruvds-wxkj6 CRON[5266]: pam_unix(cron:session): session closed for user root
Jul 16 11:51:03 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 1579233917, seq 4
Jul 16 11:51:03 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:51:16 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 1579233917, seq 4
Jul 16 11:51:16 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:51:39 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 1579233917, seq 4
Jul 16 11:51:39 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:52:01 ruvds-wxkj6 CRON[5274]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:52:01 ruvds-wxkj6 CRON[5273]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:52:01 ruvds-wxkj6 CRON[5275]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:52:01 ruvds-wxkj6 CRON[5276]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:52:01 ruvds-wxkj6 CRON[5274]: pam_unix(cron:session): session closed for user root
Jul 16 11:52:01 ruvds-wxkj6 CRON[5273]: pam_unix(cron:session): session closed for user root
Jul 16 11:52:21 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 1579233917, seq 4
Jul 16 11:52:21 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:53:01 ruvds-wxkj6 CRON[5280]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:53:01 ruvds-wxkj6 CRON[5279]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:53:01 ruvds-wxkj6 CRON[5281]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:53:01 ruvds-wxkj6 CRON[5282]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:53:01 ruvds-wxkj6 CRON[5280]: pam_unix(cron:session): session closed for user root
Jul 16 11:53:01 ruvds-wxkj6 CRON[5279]: pam_unix(cron:session): session closed for user root
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 16[KNL] creating delete job for CHILD_SA ESP/0xc833d622/194.87.101.244
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 16[JOB] CHILD_SA ESP/0xc833d622/194.87.101.244 not found for delete
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[81] to 84.201.157.25
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[81] to 84.201.157.25
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[ENC] could not decrypt payloads
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[IKE] message parsing failed
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[IKE] INFORMATIONAL_V1 request with message ID 1025148693 processing failed
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[81] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[81] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 3056201326 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:53:37 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:53:41 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 3056201326, seq 4
Jul 16 11:53:41 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:53:48 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 2 of request message ID 3056201326, seq 4
Jul 16 11:53:48 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:54:01 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 3056201326, seq 4
Jul 16 11:54:01 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:54:01 ruvds-wxkj6 CRON[5286]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:54:01 ruvds-wxkj6 CRON[5287]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:54:01 ruvds-wxkj6 CRON[5288]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:54:01 ruvds-wxkj6 CRON[5289]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:54:01 ruvds-wxkj6 CRON[5287]: pam_unix(cron:session): session closed for user root
Jul 16 11:54:01 ruvds-wxkj6 CRON[5286]: pam_unix(cron:session): session closed for user root
Jul 16 11:54:24 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 3056201326, seq 4
Jul 16 11:54:24 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5299]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5301]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5298]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5295]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5296]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5297]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5300]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5294]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5304]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5305]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5303]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5306]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5302]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5307]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5308]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5309]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 11:55:01 ruvds-wxkj6 CRON[5297]: pam_unix(cron:session): session closed for user root
Jul 16 11:55:01 ruvds-wxkj6 CRON[5298]: pam_unix(cron:session): session closed for user root
Jul 16 11:55:02 ruvds-wxkj6 CRON[5299]: pam_unix(cron:session): session closed for user root
Jul 16 11:55:02 ruvds-wxkj6 CRON[5296]: pam_unix(cron:session): session closed for user root
Jul 16 11:55:02 ruvds-wxkj6 CRON[5300]: pam_unix(cron:session): session closed for user root
Jul 16 11:55:02 ruvds-wxkj6 CRON[5301]: pam_unix(cron:session): session closed for user root
Jul 16 11:55:02 ruvds-wxkj6 CRON[5294]: pam_unix(cron:session): session closed for user root
Jul 16 11:55:02 ruvds-wxkj6 CRON[5295]: pam_unix(cron:session): session closed for user root
Jul 16 11:55:06 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 3056201326, seq 4
Jul 16 11:55:06 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:56:01 ruvds-wxkj6 CRON[5330]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:56:01 ruvds-wxkj6 CRON[5331]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:56:01 ruvds-wxkj6 CRON[5332]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:56:01 ruvds-wxkj6 CRON[5333]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:56:01 ruvds-wxkj6 CRON[5331]: pam_unix(cron:session): session closed for user root
Jul 16 11:56:01 ruvds-wxkj6 CRON[5330]: pam_unix(cron:session): session closed for user root
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xc83f6c7b/194.87.101.244
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xc83f6c7b/194.87.101.244 not found for delete
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 07[IKE] giving up after 5 retransmits
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 07[IKE] initiating Main Mode IKE_SA vpnki-l2tp[82] to 84.201.157.25
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 07[IKE] initiating Main Mode IKE_SA vpnki-l2tp[82] to 84.201.157.25
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 16[IKE] received DPD vendor ID
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 16[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 16[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 679519919 processing failed
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[82] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[82] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 3003716600 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:56:22 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:56:26 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 3003716600, seq 4
Jul 16 11:56:26 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:56:32 ruvds-wxkj6 sshd[5337]: Unable to negotiate with 61.177.172.59 port 15216: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Jul 16 11:56:33 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 3003716600, seq 4
Jul 16 11:56:33 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:56:46 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 3003716600, seq 4
Jul 16 11:56:46 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:57:01 ruvds-wxkj6 CRON[5339]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:57:01 ruvds-wxkj6 CRON[5340]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:57:01 ruvds-wxkj6 CRON[5341]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:57:01 ruvds-wxkj6 CRON[5342]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:57:01 ruvds-wxkj6 CRON[5340]: pam_unix(cron:session): session closed for user root
Jul 16 11:57:01 ruvds-wxkj6 CRON[5339]: pam_unix(cron:session): session closed for user root
Jul 16 11:57:09 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 4 of request message ID 3003716600, seq 4
Jul 16 11:57:09 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:57:51 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 3003716600, seq 4
Jul 16 11:57:51 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:58:01 ruvds-wxkj6 CRON[5346]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:58:01 ruvds-wxkj6 CRON[5347]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:58:01 ruvds-wxkj6 CRON[5348]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:58:01 ruvds-wxkj6 CRON[5349]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:58:01 ruvds-wxkj6 CRON[5347]: pam_unix(cron:session): session closed for user root
Jul 16 11:58:01 ruvds-wxkj6 CRON[5346]: pam_unix(cron:session): session closed for user root
Jul 16 11:59:01 ruvds-wxkj6 CRON[5352]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:59:01 ruvds-wxkj6 CRON[5353]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 11:59:01 ruvds-wxkj6 CRON[5354]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 11:59:01 ruvds-wxkj6 CRON[5355]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 11:59:01 ruvds-wxkj6 CRON[5353]: pam_unix(cron:session): session closed for user root
Jul 16 11:59:01 ruvds-wxkj6 CRON[5352]: pam_unix(cron:session): session closed for user root
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xc6e48b95/194.87.101.244
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xc6e48b95/194.87.101.244 not found for delete
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[83] to 84.201.157.25
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[83] to 84.201.157.25
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[ENC] could not decrypt payloads
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[IKE] message parsing failed
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[IKE] ignore malformed INFORMATIONAL request
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[IKE] INFORMATIONAL_V1 request with message ID 3636489701 processing failed
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[83] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[83] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[ENC] generating QUICK_MODE request 3179982807 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 11:59:07 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:59:11 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 3179982807, seq 4
Jul 16 11:59:11 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:59:18 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 3179982807, seq 4
Jul 16 11:59:18 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:59:31 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 3179982807, seq 4
Jul 16 11:59:31 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 11:59:55 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 3179982807, seq 4
Jul 16 11:59:55 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5367]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5368]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5364]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5363]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5361]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5360]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5369]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5362]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5370]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5372]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5373]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr addon/srvmon >/dev/null 2>&1)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5374]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5365]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5375]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5366]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5376]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/scheduler.php    >> /usr/local/mgr5/var/raisp_data/log/raisp_scheduler.log   2>&1)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5359]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5379]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5381]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5363]: pam_unix(cron:session): session closed for user root
Jul 16 12:00:01 ruvds-wxkj6 CRON[5367]: pam_unix(cron:session): session closed for user root
Jul 16 12:00:01 ruvds-wxkj6 CRON[5371]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5364]: pam_unix(cron:session): session closed for user root
Jul 16 12:00:01 ruvds-wxkj6 CRON[5386]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5365]: pam_unix(cron:session): session closed for user root
Jul 16 12:00:01 ruvds-wxkj6 CRON[5390]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 12:00:01 ruvds-wxkj6 CRON[5366]: pam_unix(cron:session): session closed for user root
Jul 16 12:00:01 ruvds-wxkj6 CRON[5359]: pam_unix(cron:session): session closed for user www-data
Jul 16 12:00:01 ruvds-wxkj6 CRON[5369]: pam_unix(cron:session): session closed for user root
Jul 16 12:00:01 ruvds-wxkj6 CRON[5368]: pam_unix(cron:session): session closed for user root
Jul 16 12:00:01 ruvds-wxkj6 CRON[5360]: pam_unix(cron:session): session closed for user root
Jul 16 12:00:01 ruvds-wxkj6 CRON[5361]: pam_unix(cron:session): session closed for user root
Jul 16 12:00:01 ruvds-wxkj6 CRON[5362]: pam_unix(cron:session): session closed for user root
Jul 16 12:00:25 ruvds-wxkj6 sshd[5410]: error: kex_exchange_identification: Connection closed by remote host
Jul 16 12:00:25 ruvds-wxkj6 sshd[5410]: Connection closed by 141.98.10.157 port 49336
Jul 16 12:00:33 ruvds-wxkj6 sshd[5411]: Unable to negotiate with 141.98.10.157 port 41082: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Jul 16 12:00:37 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 5 of request message ID 3179982807, seq 4
Jul 16 12:00:37 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:01:01 ruvds-wxkj6 CRON[5415]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:01:01 ruvds-wxkj6 CRON[5416]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:01:01 ruvds-wxkj6 CRON[5417]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:01:01 ruvds-wxkj6 CRON[5418]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:01:01 ruvds-wxkj6 CRON[5416]: pam_unix(cron:session): session closed for user root
Jul 16 12:01:01 ruvds-wxkj6 CRON[5415]: pam_unix(cron:session): session closed for user root
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xc98f9deb/194.87.101.244
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xc98f9deb/194.87.101.244 not found for delete
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[84] to 84.201.157.25
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[84] to 84.201.157.25
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 1813305130 processing failed
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[84] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[84] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 2451152415 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:01:52 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:01:56 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 2451152415, seq 4
Jul 16 12:01:56 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:02:01 ruvds-wxkj6 CRON[5423]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:02:01 ruvds-wxkj6 CRON[5422]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:02:01 ruvds-wxkj6 CRON[5424]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:02:01 ruvds-wxkj6 CRON[5425]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:02:01 ruvds-wxkj6 CRON[5423]: pam_unix(cron:session): session closed for user root
Jul 16 12:02:01 ruvds-wxkj6 CRON[5422]: pam_unix(cron:session): session closed for user root
Jul 16 12:02:03 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 2451152415, seq 4
Jul 16 12:02:03 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:02:16 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 2451152415, seq 4
Jul 16 12:02:16 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:02:40 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 2451152415, seq 4
Jul 16 12:02:40 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:03:01 ruvds-wxkj6 CRON[5430]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:03:01 ruvds-wxkj6 CRON[5429]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:03:01 ruvds-wxkj6 CRON[5431]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:03:01 ruvds-wxkj6 CRON[5432]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:03:01 ruvds-wxkj6 CRON[5430]: pam_unix(cron:session): session closed for user root
Jul 16 12:03:01 ruvds-wxkj6 CRON[5429]: pam_unix(cron:session): session closed for user root
Jul 16 12:03:22 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 2451152415, seq 4
Jul 16 12:03:22 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:04:01 ruvds-wxkj6 CRON[5435]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:04:01 ruvds-wxkj6 CRON[5436]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:04:01 ruvds-wxkj6 CRON[5437]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:04:01 ruvds-wxkj6 CRON[5438]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:04:01 ruvds-wxkj6 CRON[5436]: pam_unix(cron:session): session closed for user root
Jul 16 12:04:01 ruvds-wxkj6 CRON[5435]: pam_unix(cron:session): session closed for user root
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 16[KNL] creating delete job for CHILD_SA ESP/0xc22d823b/194.87.101.244
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 16[JOB] CHILD_SA ESP/0xc22d823b/194.87.101.244 not found for delete
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[85] to 84.201.157.25
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[85] to 84.201.157.25
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[85] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[85] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 1102250337 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 10[ENC] parsed INFORMATIONAL_V1 request 3542029777 [ HASH D ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 10[IKE] received DELETE for IKE_SA vpnki-l2tp[85]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 10[IKE] deleting IKE_SA vpnki-l2tp[85] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 10[IKE] deleting IKE_SA vpnki-l2tp[85] between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 10[IKE] initiating Main Mode IKE_SA vpnki-l2tp[86] to 84.201.157.25
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 10[IKE] initiating Main Mode IKE_SA vpnki-l2tp[86] to 84.201.157.25
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 11[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 11[IKE] received DPD vendor ID
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 11[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 11[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 12[IKE] remote host is behind NAT
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[ENC] could not decrypt payloads
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[IKE] message parsing failed
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[IKE] ignore malformed INFORMATIONAL request
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[IKE] INFORMATIONAL_V1 request with message ID 1880413700 processing failed
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[IKE] IKE_SA vpnki-l2tp[86] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[IKE] IKE_SA vpnki-l2tp[86] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[ENC] generating QUICK_MODE request 1977375115 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:04:37 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:04:41 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 1 of request message ID 1977375115, seq 4
Jul 16 12:04:41 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:04:49 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 2 of request message ID 1977375115, seq 4
Jul 16 12:04:49 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5449]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5450]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5448]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5447]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5446]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5445]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5444]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5443]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5451]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5452]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5453]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5454]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5455]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5456]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5447]: pam_unix(cron:session): session closed for user root
Jul 16 12:05:01 ruvds-wxkj6 CRON[5448]: pam_unix(cron:session): session closed for user root
Jul 16 12:05:01 ruvds-wxkj6 CRON[5460]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:05:01 ruvds-wxkj6 CRON[5446]: pam_unix(cron:session): session closed for user root
Jul 16 12:05:01 ruvds-wxkj6 CRON[5445]: pam_unix(cron:session): session closed for user root
Jul 16 12:05:01 ruvds-wxkj6 CRON[5465]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 12:05:02 ruvds-wxkj6 CRON[5449]: pam_unix(cron:session): session closed for user root
Jul 16 12:05:02 ruvds-wxkj6 CRON[5450]: pam_unix(cron:session): session closed for user root
Jul 16 12:05:02 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 3 of request message ID 1977375115, seq 4
Jul 16 12:05:02 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:05:02 ruvds-wxkj6 CRON[5444]: pam_unix(cron:session): session closed for user root
Jul 16 12:05:02 ruvds-wxkj6 CRON[5443]: pam_unix(cron:session): session closed for user root
Jul 16 12:05:25 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 4 of request message ID 1977375115, seq 4
Jul 16 12:05:25 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:06:01 ruvds-wxkj6 CRON[5482]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:06:01 ruvds-wxkj6 CRON[5483]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:06:01 ruvds-wxkj6 CRON[5484]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:06:01 ruvds-wxkj6 CRON[5485]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:06:01 ruvds-wxkj6 CRON[5483]: pam_unix(cron:session): session closed for user root
Jul 16 12:06:01 ruvds-wxkj6 CRON[5482]: pam_unix(cron:session): session closed for user root
Jul 16 12:06:07 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 1977375115, seq 4
Jul 16 12:06:07 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:07:01 ruvds-wxkj6 CRON[5489]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:07:01 ruvds-wxkj6 CRON[5488]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:07:01 ruvds-wxkj6 CRON[5490]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:07:01 ruvds-wxkj6 CRON[5491]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:07:01 ruvds-wxkj6 CRON[5489]: pam_unix(cron:session): session closed for user root
Jul 16 12:07:01 ruvds-wxkj6 CRON[5488]: pam_unix(cron:session): session closed for user root
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xc7c191eb/194.87.101.244
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xc7c191eb/194.87.101.244 not found for delete
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[87] to 84.201.157.25
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[87] to 84.201.157.25
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[ENC] could not decrypt payloads
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[IKE] message parsing failed
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[IKE] ignore malformed INFORMATIONAL request
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[IKE] INFORMATIONAL_V1 request with message ID 1028408815 processing failed
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[87] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[87] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[ENC] generating QUICK_MODE request 1626411091 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:07:22 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:07:26 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 1626411091, seq 4
Jul 16 12:07:26 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:07:34 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 1626411091, seq 4
Jul 16 12:07:34 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:07:47 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 1626411091, seq 4
Jul 16 12:07:47 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:08:01 ruvds-wxkj6 CRON[5497]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:08:01 ruvds-wxkj6 CRON[5496]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:08:01 ruvds-wxkj6 CRON[5498]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:08:01 ruvds-wxkj6 CRON[5499]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:08:01 ruvds-wxkj6 CRON[5497]: pam_unix(cron:session): session closed for user root
Jul 16 12:08:01 ruvds-wxkj6 CRON[5496]: pam_unix(cron:session): session closed for user root
Jul 16 12:08:10 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 1626411091, seq 4
Jul 16 12:08:10 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:08:52 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 5 of request message ID 1626411091, seq 4
Jul 16 12:08:52 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:09:01 ruvds-wxkj6 CRON[5504]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:09:01 ruvds-wxkj6 CRON[5503]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:09:01 ruvds-wxkj6 CRON[5502]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:09:01 ruvds-wxkj6 CRON[5505]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:09:01 ruvds-wxkj6 CRON[5506]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:09:01 ruvds-wxkj6 CRON[5507]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Jul 16 12:09:01 ruvds-wxkj6 CRON[5502]: pam_unix(cron:session): session closed for user root
Jul 16 12:09:01 ruvds-wxkj6 CRON[5504]: pam_unix(cron:session): session closed for user root
Jul 16 12:09:01 ruvds-wxkj6 CRON[5503]: pam_unix(cron:session): session closed for user root
Jul 16 12:09:01 ruvds-wxkj6 systemd[1]: Starting Clean php session files...
Jul 16 12:09:02 ruvds-wxkj6 systemd[1]: phpsessionclean.service: Succeeded.
Jul 16 12:09:02 ruvds-wxkj6 systemd[1]: Finished Clean php session files.
Jul 16 12:09:52 ruvds-wxkj6 sshd[5588]: Unable to negotiate with 61.177.172.61 port 61560: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
Jul 16 12:10:01 ruvds-wxkj6 CRON[5596]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5597]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5595]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5593]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5592]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5591]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5594]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5598]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5600]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5599]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5601]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5590]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5602]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5603]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5604]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5594]: pam_unix(cron:session): session closed for user root
Jul 16 12:10:01 ruvds-wxkj6 CRON[5607]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5595]: pam_unix(cron:session): session closed for user root
Jul 16 12:10:01 ruvds-wxkj6 CRON[5609]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5596]: pam_unix(cron:session): session closed for user root
Jul 16 12:10:01 ruvds-wxkj6 CRON[5593]: pam_unix(cron:session): session closed for user root
Jul 16 12:10:01 ruvds-wxkj6 CRON[5616]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 12:10:01 ruvds-wxkj6 CRON[5590]: pam_unix(cron:session): session closed for user www-data
Jul 16 12:10:01 ruvds-wxkj6 CRON[5598]: pam_unix(cron:session): session closed for user root
Jul 16 12:10:01 ruvds-wxkj6 CRON[5597]: pam_unix(cron:session): session closed for user root
Jul 16 12:10:01 ruvds-wxkj6 CRON[5592]: pam_unix(cron:session): session closed for user root
Jul 16 12:10:01 ruvds-wxkj6 CRON[5591]: pam_unix(cron:session): session closed for user root
Jul 16 12:10:07 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xc5dd18b7/194.87.101.244
Jul 16 12:10:07 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xc5dd18b7/194.87.101.244 not found for delete
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[88] to 84.201.157.25
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[88] to 84.201.157.25
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 3227180418 processing failed
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[88] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[88] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 214017952 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:10:08 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:10:12 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 214017952, seq 4
Jul 16 12:10:12 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:10:19 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 214017952, seq 4
Jul 16 12:10:19 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:10:32 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 214017952, seq 4
Jul 16 12:10:32 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:10:32 ruvds-wxkj6 sshd[5636]: error: kex_exchange_identification: Connection closed by remote host
Jul 16 12:10:32 ruvds-wxkj6 sshd[5636]: Connection closed by 141.98.10.175 port 44210
Jul 16 12:10:38 ruvds-wxkj6 sshd[5637]: Unable to negotiate with 141.98.10.175 port 39994: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Jul 16 12:10:55 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 214017952, seq 4
Jul 16 12:10:55 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:11:01 ruvds-wxkj6 CRON[5640]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:11:01 ruvds-wxkj6 CRON[5639]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:11:01 ruvds-wxkj6 CRON[5641]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:11:01 ruvds-wxkj6 CRON[5642]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:11:01 ruvds-wxkj6 CRON[5640]: pam_unix(cron:session): session closed for user root
Jul 16 12:11:01 ruvds-wxkj6 CRON[5639]: pam_unix(cron:session): session closed for user root
Jul 16 12:11:29 ruvds-wxkj6 sshd[5645]: error: kex_exchange_identification: Connection closed by remote host
Jul 16 12:11:29 ruvds-wxkj6 sshd[5645]: Connection closed by 109.248.6.29 port 46571
Jul 16 12:11:37 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 214017952, seq 4
Jul 16 12:11:37 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:12:01 ruvds-wxkj6 CRON[5646]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:12:01 ruvds-wxkj6 CRON[5647]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:12:01 ruvds-wxkj6 CRON[5648]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:12:01 ruvds-wxkj6 CRON[5649]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:12:01 ruvds-wxkj6 CRON[5647]: pam_unix(cron:session): session closed for user root
Jul 16 12:12:01 ruvds-wxkj6 CRON[5646]: pam_unix(cron:session): session closed for user root
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 16[KNL] creating delete job for CHILD_SA ESP/0xcedfa4b3/194.87.101.244
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 16[JOB] CHILD_SA ESP/0xcedfa4b3/194.87.101.244 not found for delete
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[89] to 84.201.157.25
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[89] to 84.201.157.25
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[ENC] could not decrypt payloads
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[IKE] message parsing failed
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[IKE] ignore malformed INFORMATIONAL request
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[IKE] INFORMATIONAL_V1 request with message ID 681111693 processing failed
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[89] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[89] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 881666117 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:12:53 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:12:57 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 881666117, seq 4
Jul 16 12:12:57 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:13:01 ruvds-wxkj6 CRON[5655]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:13:01 ruvds-wxkj6 CRON[5654]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:13:01 ruvds-wxkj6 CRON[5656]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:13:01 ruvds-wxkj6 CRON[5657]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:13:01 ruvds-wxkj6 CRON[5655]: pam_unix(cron:session): session closed for user root
Jul 16 12:13:01 ruvds-wxkj6 CRON[5654]: pam_unix(cron:session): session closed for user root
Jul 16 12:13:04 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 2 of request message ID 881666117, seq 4
Jul 16 12:13:04 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:13:17 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 881666117, seq 4
Jul 16 12:13:17 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:13:40 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 881666117, seq 4
Jul 16 12:13:40 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:14:01 ruvds-wxkj6 CRON[5661]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:14:01 ruvds-wxkj6 CRON[5660]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:14:01 ruvds-wxkj6 CRON[5662]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:14:01 ruvds-wxkj6 CRON[5663]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:14:01 ruvds-wxkj6 CRON[5661]: pam_unix(cron:session): session closed for user root
Jul 16 12:14:01 ruvds-wxkj6 CRON[5660]: pam_unix(cron:session): session closed for user root
Jul 16 12:14:22 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 881666117, seq 4
Jul 16 12:14:22 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5674]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5671]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5670]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5669]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5668]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5672]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5673]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5667]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5666]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5675]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5676]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5677]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5678]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5679]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5680]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5682]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr addon/srvmon >/dev/null 2>&1)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5670]: pam_unix(cron:session): session closed for user root
Jul 16 12:15:01 ruvds-wxkj6 CRON[5671]: pam_unix(cron:session): session closed for user root
Jul 16 12:15:01 ruvds-wxkj6 CRON[5669]: pam_unix(cron:session): session closed for user root
Jul 16 12:15:01 ruvds-wxkj6 CRON[5689]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5672]: pam_unix(cron:session): session closed for user root
Jul 16 12:15:01 ruvds-wxkj6 CRON[5668]: pam_unix(cron:session): session closed for user root
Jul 16 12:15:01 ruvds-wxkj6 CRON[5692]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 12:15:01 ruvds-wxkj6 CRON[5673]: pam_unix(cron:session): session closed for user root
Jul 16 12:15:01 ruvds-wxkj6 CRON[5674]: pam_unix(cron:session): session closed for user root
Jul 16 12:15:01 ruvds-wxkj6 CRON[5667]: pam_unix(cron:session): session closed for user root
Jul 16 12:15:01 ruvds-wxkj6 CRON[5666]: pam_unix(cron:session): session closed for user root
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xc64373b3/194.87.101.244
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xc64373b3/194.87.101.244 not found for delete
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 07[IKE] giving up after 5 retransmits
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 07[IKE] initiating Main Mode IKE_SA vpnki-l2tp[90] to 84.201.157.25
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 07[IKE] initiating Main Mode IKE_SA vpnki-l2tp[90] to 84.201.157.25
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 16[IKE] received DPD vendor ID
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 16[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 16[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 4153333972 processing failed
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[90] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[90] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 2951011761 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:15:38 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:15:42 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 2951011761, seq 4
Jul 16 12:15:42 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:15:49 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 2951011761, seq 4
Jul 16 12:15:49 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:16:01 ruvds-wxkj6 CRON[5707]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:16:01 ruvds-wxkj6 CRON[5706]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:16:01 ruvds-wxkj6 CRON[5708]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:16:01 ruvds-wxkj6 CRON[5709]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:16:01 ruvds-wxkj6 CRON[5707]: pam_unix(cron:session): session closed for user root
Jul 16 12:16:01 ruvds-wxkj6 CRON[5706]: pam_unix(cron:session): session closed for user root
Jul 16 12:16:02 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 2951011761, seq 4
Jul 16 12:16:02 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:16:25 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 4 of request message ID 2951011761, seq 4
Jul 16 12:16:25 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:17:01 ruvds-wxkj6 CRON[5715]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:17:01 ruvds-wxkj6 CRON[5714]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:17:01 ruvds-wxkj6 CRON[5716]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:17:01 ruvds-wxkj6 CRON[5717]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:17:01 ruvds-wxkj6 CRON[5718]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:17:01 ruvds-wxkj6 CRON[5719]: (root) CMD (   cd / && run-parts --report /etc/cron.hourly)
Jul 16 12:17:01 ruvds-wxkj6 CRON[5716]: pam_unix(cron:session): session closed for user root
Jul 16 12:17:01 ruvds-wxkj6 CRON[5714]: pam_unix(cron:session): session closed for user root
Jul 16 12:17:02 ruvds-wxkj6 CRON[5715]: pam_unix(cron:session): session closed for user root
Jul 16 12:17:07 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 2951011761, seq 4
Jul 16 12:17:07 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:18:01 ruvds-wxkj6 CRON[5725]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:18:01 ruvds-wxkj6 CRON[5724]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:18:01 ruvds-wxkj6 CRON[5726]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:18:01 ruvds-wxkj6 CRON[5727]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:18:01 ruvds-wxkj6 CRON[5725]: pam_unix(cron:session): session closed for user root
Jul 16 12:18:01 ruvds-wxkj6 CRON[5724]: pam_unix(cron:session): session closed for user root
Jul 16 12:18:16 ruvds-wxkj6 sshd[5730]: Invalid user admin from 74.123.23.123 port 41433
Jul 16 12:18:16 ruvds-wxkj6 sshd[5730]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 12:18:16 ruvds-wxkj6 sshd[5730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.123.23.123
Jul 16 12:18:18 ruvds-wxkj6 sshd[5730]: Failed password for invalid user admin from 74.123.23.123 port 41433 ssh2
Jul 16 12:18:19 ruvds-wxkj6 sshd[5730]: Connection closed by invalid user admin 74.123.23.123 port 41433 [preauth]
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xcbdb9e21/194.87.101.244
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xcbdb9e21/194.87.101.244 not found for delete
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[91] to 84.201.157.25
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[91] to 84.201.157.25
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[ENC] could not decrypt payloads
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[IKE] message parsing failed
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[IKE] ignore malformed INFORMATIONAL request
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[IKE] INFORMATIONAL_V1 request with message ID 630300143 processing failed
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[91] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[91] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[ENC] generating QUICK_MODE request 507314166 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:18:23 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:18:27 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 507314166, seq 4
Jul 16 12:18:27 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:18:34 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 507314166, seq 4
Jul 16 12:18:34 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:18:47 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 3 of request message ID 507314166, seq 4
Jul 16 12:18:47 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:19:01 ruvds-wxkj6 CRON[5734]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:19:01 ruvds-wxkj6 CRON[5733]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:19:01 ruvds-wxkj6 CRON[5735]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:19:01 ruvds-wxkj6 CRON[5736]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:19:01 ruvds-wxkj6 CRON[5734]: pam_unix(cron:session): session closed for user root
Jul 16 12:19:01 ruvds-wxkj6 CRON[5733]: pam_unix(cron:session): session closed for user root
Jul 16 12:19:10 ruvds-wxkj6 charon[1363]: 13[IKE] sending retransmit 4 of request message ID 507314166, seq 4
Jul 16 12:19:10 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:19:52 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 5 of request message ID 507314166, seq 4
Jul 16 12:19:52 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5742]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5747]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5740]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5744]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5746]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5743]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5741]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5748]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5745]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5749]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5739]: pam_unix(cron:session): session opened for user www-data(uid=33) by (uid=0)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5750]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5751]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5753]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5755]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5757]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5744]: pam_unix(cron:session): session closed for user root
Jul 16 12:20:01 ruvds-wxkj6 CRON[5742]: pam_unix(cron:session): session closed for user root
Jul 16 12:20:01 ruvds-wxkj6 CRON[5761]: (www-data) CMD ([ -x /usr/share/awstats/tools/update.sh ] && /usr/share/awstats/tools/update.sh)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5762]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 12:20:01 ruvds-wxkj6 CRON[5745]: pam_unix(cron:session): session closed for user root
Jul 16 12:20:01 ruvds-wxkj6 CRON[5743]: pam_unix(cron:session): session closed for user root
Jul 16 12:20:01 ruvds-wxkj6 CRON[5739]: pam_unix(cron:session): session closed for user www-data
Jul 16 12:20:01 ruvds-wxkj6 CRON[5746]: pam_unix(cron:session): session closed for user root
Jul 16 12:20:01 ruvds-wxkj6 CRON[5747]: pam_unix(cron:session): session closed for user root
Jul 16 12:20:01 ruvds-wxkj6 CRON[5740]: pam_unix(cron:session): session closed for user root
Jul 16 12:20:01 ruvds-wxkj6 CRON[5741]: pam_unix(cron:session): session closed for user root
Jul 16 12:21:01 ruvds-wxkj6 CRON[5785]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:21:01 ruvds-wxkj6 CRON[5786]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:21:02 ruvds-wxkj6 CRON[5785]: pam_unix(cron:session): session closed for user root
Jul 16 12:21:02 ruvds-wxkj6 CRON[5784]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:21:02 ruvds-wxkj6 CRON[5788]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:21:02 ruvds-wxkj6 CRON[5784]: pam_unix(cron:session): session closed for user root
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 05[KNL] creating delete job for CHILD_SA ESP/0xc1c19e4e/194.87.101.244
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 05[JOB] CHILD_SA ESP/0xc1c19e4e/194.87.101.244 not found for delete
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 09[IKE] giving up after 5 retransmits
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[92] to 84.201.157.25
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 09[IKE] initiating Main Mode IKE_SA vpnki-l2tp[92] to 84.201.157.25
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 09[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 10[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 10[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 10[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 10[IKE] received DPD vendor ID
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 10[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 10[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 10[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 11[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 11[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 11[IKE] remote host is behind NAT
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 11[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[ENC] could not decrypt payloads
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[IKE] message parsing failed
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[IKE] ignore malformed INFORMATIONAL request
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[IKE] INFORMATIONAL_V1 request with message ID 2279279435 processing failed
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[92] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[IKE] IKE_SA vpnki-l2tp[92] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[ENC] generating QUICK_MODE request 1750016356 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:21:08 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:21:12 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 1 of request message ID 1750016356, seq 4
Jul 16 12:21:12 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:21:19 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 2 of request message ID 1750016356, seq 4
Jul 16 12:21:19 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:21:32 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 3 of request message ID 1750016356, seq 4
Jul 16 12:21:32 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:21:56 ruvds-wxkj6 charon[1363]: 10[IKE] sending retransmit 4 of request message ID 1750016356, seq 4
Jul 16 12:21:56 ruvds-wxkj6 charon[1363]: 10[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:22:01 ruvds-wxkj6 CRON[5791]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:22:01 ruvds-wxkj6 CRON[5792]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:22:01 ruvds-wxkj6 CRON[5793]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:22:01 ruvds-wxkj6 CRON[5794]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:22:01 ruvds-wxkj6 CRON[5792]: pam_unix(cron:session): session closed for user root
Jul 16 12:22:01 ruvds-wxkj6 CRON[5791]: pam_unix(cron:session): session closed for user root
Jul 16 12:22:22 ruvds-wxkj6 sshd[5797]: Invalid user admin from 185.196.220.70 port 59632
Jul 16 12:22:22 ruvds-wxkj6 sshd[5797]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 12:22:22 ruvds-wxkj6 sshd[5797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.196.220.70
Jul 16 12:22:24 ruvds-wxkj6 sshd[5797]: Failed password for invalid user admin from 185.196.220.70 port 59632 ssh2
Jul 16 12:22:26 ruvds-wxkj6 sshd[5797]: Received disconnect from 185.196.220.70 port 59632:11: end [preauth]
Jul 16 12:22:26 ruvds-wxkj6 sshd[5797]: Disconnected from invalid user admin 185.196.220.70 port 59632 [preauth]
Jul 16 12:22:26 ruvds-wxkj6 sshd[5799]: Invalid user admin from 185.196.220.70 port 47758
Jul 16 12:22:26 ruvds-wxkj6 sshd[5799]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 12:22:26 ruvds-wxkj6 sshd[5799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.196.220.70
Jul 16 12:22:28 ruvds-wxkj6 sshd[5799]: Failed password for invalid user admin from 185.196.220.70 port 47758 ssh2
Jul 16 12:22:29 ruvds-wxkj6 sshd[5799]: Received disconnect from 185.196.220.70 port 47758:11: end [preauth]
Jul 16 12:22:29 ruvds-wxkj6 sshd[5799]: Disconnected from invalid user admin 185.196.220.70 port 47758 [preauth]
Jul 16 12:22:29 ruvds-wxkj6 sshd[5801]: Invalid user ubnt from 185.196.220.70 port 44552
Jul 16 12:22:29 ruvds-wxkj6 sshd[5801]: pam_unix(sshd:auth): check pass; user unknown
Jul 16 12:22:29 ruvds-wxkj6 sshd[5801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.196.220.70
Jul 16 12:22:32 ruvds-wxkj6 sshd[5801]: Failed password for invalid user ubnt from 185.196.220.70 port 44552 ssh2
Jul 16 12:22:38 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 5 of request message ID 1750016356, seq 4
Jul 16 12:22:38 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:23:01 ruvds-wxkj6 CRON[5810]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:23:01 ruvds-wxkj6 CRON[5811]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:23:01 ruvds-wxkj6 CRON[5809]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:23:01 ruvds-wxkj6 CRON[5812]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:23:01 ruvds-wxkj6 CRON[5810]: pam_unix(cron:session): session closed for user root
Jul 16 12:23:01 ruvds-wxkj6 CRON[5809]: pam_unix(cron:session): session closed for user root
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 16[KNL] creating delete job for CHILD_SA ESP/0xc739cc6d/194.87.101.244
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 16[JOB] CHILD_SA ESP/0xc739cc6d/194.87.101.244 not found for delete
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 06[IKE] giving up after 5 retransmits
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[93] to 84.201.157.25
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 06[IKE] initiating Main Mode IKE_SA vpnki-l2tp[93] to 84.201.157.25
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 06[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 05[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 05[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 05[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 05[IKE] received DPD vendor ID
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 05[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 05[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 05[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 08[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 08[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 08[IKE] remote host is behind NAT
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 08[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[ENC] could not decrypt payloads
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[IKE] message parsing failed
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[IKE] ignore malformed INFORMATIONAL request
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[IKE] INFORMATIONAL_V1 request with message ID 1561095393 processing failed
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[93] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[IKE] IKE_SA vpnki-l2tp[93] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[ENC] generating QUICK_MODE request 3526262376 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:23:53 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:23:57 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 1 of request message ID 3526262376, seq 4
Jul 16 12:23:57 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:24:01 ruvds-wxkj6 CRON[5818]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:24:01 ruvds-wxkj6 CRON[5817]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:24:01 ruvds-wxkj6 CRON[5819]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:24:01 ruvds-wxkj6 CRON[5820]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:24:01 ruvds-wxkj6 CRON[5818]: pam_unix(cron:session): session closed for user root
Jul 16 12:24:01 ruvds-wxkj6 CRON[5817]: pam_unix(cron:session): session closed for user root
Jul 16 12:24:04 ruvds-wxkj6 charon[1363]: 07[IKE] sending retransmit 2 of request message ID 3526262376, seq 4
Jul 16 12:24:04 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:24:17 ruvds-wxkj6 charon[1363]: 15[IKE] sending retransmit 3 of request message ID 3526262376, seq 4
Jul 16 12:24:17 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:24:41 ruvds-wxkj6 charon[1363]: 05[IKE] sending retransmit 4 of request message ID 3526262376, seq 4
Jul 16 12:24:41 ruvds-wxkj6 charon[1363]: 05[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5828]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5826]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5825]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5829]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5824]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5823]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5827]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5831]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/metric >/dev/null 2>&1)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5832]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5833]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core problems.autosolve >/dev/null 2>&1)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5834]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/report_err >/dev/null 2>&1)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5835]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr problems.autosolve >/dev/null 2>&1)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5830]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5826]: pam_unix(cron:session): session closed for user root
Jul 16 12:25:01 ruvds-wxkj6 CRON[5828]: pam_unix(cron:session): session closed for user root
Jul 16 12:25:01 ruvds-wxkj6 CRON[5839]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5825]: pam_unix(cron:session): session closed for user root
Jul 16 12:25:01 ruvds-wxkj6 CRON[5841]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/email.php        >> /usr/local/mgr5/var/raisp_data/log/email.log             2>&1)
Jul 16 12:25:01 ruvds-wxkj6 CRON[5827]: pam_unix(cron:session): session closed for user root
Jul 16 12:25:01 ruvds-wxkj6 CRON[5848]: (root) CMD (/usr/local/mgr5/sbin/cron-core sbin/mgrctl -m core sysinfostat >/dev/null 2>&1)
Jul 16 12:25:02 ruvds-wxkj6 CRON[5829]: pam_unix(cron:session): session closed for user root
Jul 16 12:25:02 ruvds-wxkj6 CRON[5824]: pam_unix(cron:session): session closed for user root
Jul 16 12:25:02 ruvds-wxkj6 CRON[5830]: pam_unix(cron:session): session closed for user root
Jul 16 12:25:02 ruvds-wxkj6 CRON[5823]: pam_unix(cron:session): session closed for user root
Jul 16 12:25:23 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 5 of request message ID 3526262376, seq 4
Jul 16 12:25:23 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:26:01 ruvds-wxkj6 CRON[5860]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:26:01 ruvds-wxkj6 CRON[5861]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:26:01 ruvds-wxkj6 CRON[5862]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:26:01 ruvds-wxkj6 CRON[5863]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:26:01 ruvds-wxkj6 CRON[5861]: pam_unix(cron:session): session closed for user root
Jul 16 12:26:01 ruvds-wxkj6 CRON[5860]: pam_unix(cron:session): session closed for user root
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 13[KNL] creating delete job for CHILD_SA ESP/0xcd0b5648/194.87.101.244
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 13[JOB] CHILD_SA ESP/0xcd0b5648/194.87.101.244 not found for delete
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 07[IKE] giving up after 5 retransmits
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 07[IKE] initiating Main Mode IKE_SA vpnki-l2tp[94] to 84.201.157.25
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 07[IKE] initiating Main Mode IKE_SA vpnki-l2tp[94] to 84.201.157.25
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 07[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 16[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 16[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 16[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 16[IKE] received DPD vendor ID
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 16[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 16[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 16[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 15[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 15[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 15[IKE] remote host is behind NAT
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 15[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 15[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[ENC] could not decrypt payloads
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[IKE] message parsing failed
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[IKE] ignore malformed INFORMATIONAL request
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[IKE] INFORMATIONAL_V1 request with message ID 1637958466 processing failed
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[94] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[IKE] IKE_SA vpnki-l2tp[94] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[ENC] generating QUICK_MODE request 475489463 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:26:38 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:26:42 ruvds-wxkj6 charon[1363]: 11[IKE] sending retransmit 1 of request message ID 475489463, seq 4
Jul 16 12:26:42 ruvds-wxkj6 charon[1363]: 11[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:26:50 ruvds-wxkj6 charon[1363]: 12[IKE] sending retransmit 2 of request message ID 475489463, seq 4
Jul 16 12:26:50 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:27:01 ruvds-wxkj6 CRON[5868]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:27:01 ruvds-wxkj6 CRON[5867]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:27:01 ruvds-wxkj6 CRON[5869]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:27:01 ruvds-wxkj6 CRON[5870]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:27:01 ruvds-wxkj6 CRON[5868]: pam_unix(cron:session): session closed for user root
Jul 16 12:27:01 ruvds-wxkj6 CRON[5867]: pam_unix(cron:session): session closed for user root
Jul 16 12:27:03 ruvds-wxkj6 charon[1363]: 14[IKE] sending retransmit 3 of request message ID 475489463, seq 4
Jul 16 12:27:03 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:27:26 ruvds-wxkj6 charon[1363]: 16[IKE] sending retransmit 4 of request message ID 475489463, seq 4
Jul 16 12:27:26 ruvds-wxkj6 charon[1363]: 16[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:28:01 ruvds-wxkj6 CRON[5874]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:28:01 ruvds-wxkj6 CRON[5873]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:28:01 ruvds-wxkj6 CRON[5876]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:28:01 ruvds-wxkj6 CRON[5877]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:28:01 ruvds-wxkj6 CRON[5874]: pam_unix(cron:session): session closed for user root
Jul 16 12:28:01 ruvds-wxkj6 CRON[5873]: pam_unix(cron:session): session closed for user root
Jul 16 12:28:08 ruvds-wxkj6 charon[1363]: 06[IKE] sending retransmit 5 of request message ID 475489463, seq 4
Jul 16 12:28:08 ruvds-wxkj6 charon[1363]: 06[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:29:01 ruvds-wxkj6 CRON[5881]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:29:01 ruvds-wxkj6 CRON[5880]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 16 12:29:01 ruvds-wxkj6 CRON[5882]: (root) CMD (/usr/local/mgr5/sbin/cron-ispmgr sbin/mgrctl -m ispmgr periodic >/dev/null 2>&1)
Jul 16 12:29:01 ruvds-wxkj6 CRON[5883]: (root) CMD (   /opt/php71/bin/php -n -c /usr/local/mgr5/addon/revisium_antivirus/php.ini /usr/local/mgr5/addon/revisium_antivirus/services/queue.php        >> /usr/local/mgr5/var/raisp_data/log/raisp_queue.log       2>&1)
Jul 16 12:29:01 ruvds-wxkj6 CRON[5881]: pam_unix(cron:session): session closed for user root
Jul 16 12:29:01 ruvds-wxkj6 CRON[5880]: pam_unix(cron:session): session closed for user root
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 10[KNL] creating delete job for CHILD_SA ESP/0xcc2767fe/194.87.101.244
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 10[JOB] CHILD_SA ESP/0xcc2767fe/194.87.101.244 not found for delete
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 12[IKE] giving up after 5 retransmits
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[95] to 84.201.157.25
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 12[IKE] initiating Main Mode IKE_SA vpnki-l2tp[95] to 84.201.157.25
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 12[ENC] generating ID_PROT request 0 [ SA V V V V V ]
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 12[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (240 bytes)
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 13[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (140 bytes)
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 13[ENC] parsed ID_PROT response 0 [ SA V V V ]
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 13[ENC] received unknown vendor ID: 4f:53:57:79:5f:44:72:65:7a:65:47:53
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 13[IKE] received DPD vendor ID
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 13[IKE] received NAT-T (RFC 3947) vendor ID
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 13[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 13[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 13[NET] sending packet: from 194.87.101.244[500] to 84.201.157.25[500] (372 bytes)
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 14[NET] received packet: from 84.201.157.25[500] to 194.87.101.244[500] (356 bytes)
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 14[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 14[IKE] remote host is behind NAT
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 14[ENC] generating ID_PROT request 0 [ ID HASH ]
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 14[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (76 bytes)
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (92 bytes)
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[ENC] invalid HASH_V1 payload length, decryption failed?
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[ENC] could not decrypt payloads
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[IKE] message parsing failed
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[IKE] ignore malformed INFORMATIONAL request
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[IKE] INFORMATIONAL_V1 request with message ID 3526835875 processing failed
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[NET] received packet: from 84.201.157.25[4500] to 194.87.101.244[4500] (76 bytes)
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[ENC] parsed ID_PROT response 0 [ ID HASH V ]
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[ENC] received unknown vendor ID: 49:4b:45:76:32
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[95] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[IKE] IKE_SA vpnki-l2tp[95] established between 194.87.101.244[194.87.101.244]...84.201.157.25[10.128.0.20]
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[ENC] generating QUICK_MODE request 3531144275 [ HASH SA No ID ID NAT-OA NAT-OA ]
Jul 16 12:29:23 ruvds-wxkj6 charon[1363]: 07[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:29:27 ruvds-wxkj6 charon[1363]: 08[IKE] sending retransmit 1 of request message ID 3531144275, seq 4
Jul 16 12:29:27 ruvds-wxkj6 charon[1363]: 08[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)
Jul 16 12:29:35 ruvds-wxkj6 charon[1363]: 09[IKE] sending retransmit 2 of request message ID 3531144275, seq 4
Jul 16 12:29:35 ruvds-wxkj6 charon[1363]: 09[NET] sending packet: from 194.87.101.244[4500] to 84.201.157.25[4500] (220 bytes)

debian, pptp, pptp vpn, xl2tpd

oleg-m
(16.07.22 10:51:21 MSK)

12 комментариев