ThaXified
Posts: 1
Joined: Thu Oct 18, 2018 11:01 pm

Never Saw This Before, Might been hacked

Thu Oct 18, 2018 11:05 pm

Hello, First of all i dont know if this is the right forum to post a syslog?

my raspberry acted really strange this evening. it randomly shutted down and restarted and all strange kind of codes was loaded
with ip adressed permission denied stuff like that

cant Someone explain? what this is?? :? :?

BTW IM RUNNING RETROPIE 4.4

Code: Select all


Oct 18 22:51:09 retropie rc.local[516]: bins.sh: no process found
Oct 18 22:51:09 retropie rc.local[516]: minerd: no process found
Oct 18 22:51:09 retropie rc.local[516]: node: no process found
Oct 18 22:51:09 retropie rc.local[516]: nodejs: no process found
Oct 18 22:51:09 retropie rc.local[516]: ktx-armv4l: no process found
Oct 18 22:51:09 retropie rc.local[516]: ktx-i586: no process found
Oct 18 22:51:09 retropie rc.local[516]: ktx-m68k: no process found
Oct 18 22:51:09 retropie rc.local[516]: ktx-mips: no process found
Oct 18 22:51:09 retropie rc.local[516]: ktx-mipsel: no process found
Oct 18 22:51:09 retropie rc.local[516]: ktx-powerpc: no process found
Oct 18 22:51:09 retropie rc.local[516]: ktx-sh4: no process found
Oct 18 22:51:09 retropie rc.local[516]: ktx-sparc: no process found
Oct 18 22:51:09 retropie rc.local[516]: arm5: no process found
Oct 18 22:51:09 retropie systemd[1]: Started OpenBSD Secure Shell server.
Oct 18 22:51:09 retropie rc.local[516]: zmap: no process found
Oct 18 22:51:10 retropie rc.local[516]: kaiten: no process found
Oct 18 22:51:10 retropie rc.local[516]: perl: no process found
Oct 18 22:51:10 retropie systemd[1]: nmbd.service: Supervising process 567 which is not our child. We'll most likely not notice when it exits.
Oct 18 22:51:10 retropie systemd[1]: Started Samba NMB Daemon.
Oct 18 22:51:10 retropie systemd[1]: Starting Samba SMB Daemon...
Oct 18 22:51:11 retropie systemd[1]: smbd.service: Supervising process 569 which is not our child. We'll most likely not notice when it exits.
Oct 18 22:51:11 retropie systemd[1]: Started Samba SMB Daemon.
Oct 18 22:51:16 retropie asplashscreen.sh[90]: Video codec omx-h264 width 1280 height 720 profile 100 fps 30.000000
Oct 18 22:51:16 retropie asplashscreen.sh[90]: Audio codec aac channels 2 samplerate 48000 bitspersample 16
Oct 18 22:51:16 retropie asplashscreen.sh[90]: Subtitle count: 0, state: off, index: 1, delay: 0
Oct 18 22:51:16 retropie asplashscreen.sh[90]: V:PortSettingsChanged: [email protected] interlace:0 deinterlace:0 anaglyph:0 par:1.00 display:0 layer:10000 alpha:255 aspectMode:0
Oct 18 22:51:16 retropie asplashscreen.sh[90]: have a nice day ;)
Oct 18 22:51:17 retropie dhcpcd[514]: wlan0: no IPv6 Routers available
Oct 18 22:51:37 retropie systemd[1]: Time has been changed
Oct 18 22:51:37 retropie systemd-timesyncd[263]: Synchronized to time server 129.250.35.251:123 (2.debian.pool.ntp.org).
Oct 18 22:51:37 retropie systemd[1]: apt-daily.timer: Adding 6h 37min 41.107088s random time.
Oct 18 22:51:37 retropie systemd[1]: apt-daily-upgrade.timer: Adding 58min 25.668762s random time.
Oct 18 22:51:46 retropie rc.local[516]: dpkg-preconfigure: unable to re-open stdin: No such file or directory
Oct 18 22:51:53 retropie rc.local[516]: W: --force-yes is deprecated, use one of the options starting with --allow instead.
Oct 18 22:51:53 retropie zmap: zmap: zmap main thread started
Oct 18 22:51:53 retropie zmap: zmap: Loaded configuration file /etc/zmap/zmap.conf
Oct 18 22:51:53 retropie zmap: zmap: syslog support enabled
Oct 18 22:51:53 retropie zmap: zmap: requested ouput-module: default
Oct 18 22:51:53 retropie zmap: zmap: no output module provided. will use csv.
Oct 18 22:51:53 retropie zmap: fieldset: probe module does not supply application success field.
Oct 18 22:51:53 retropie zmap: zmap: requested output field (0): saddr
Oct 18 22:51:53 retropie zmap: zmap: scan will abort if more than 1 sendto failures occur
Oct 18 22:51:53 retropie zmap: constraint: Painting value 1
Oct 18 22:51:53 retropie zmap: constraint: 3702243328 IPs in radix array, 4748456 IPs in tree
Oct 18 22:51:53 retropie zmap: constraint: 3702258432 addresses (86% of address space) can be scanned
Oct 18 22:51:54 retropie kernel: [   52.206322] Netfilter messages via NETLINK v0.30.
Oct 18 22:51:54 retropie zmap: zmap: no interface provided. will use default interface (wlan0).
Oct 18 22:51:54 retropie zmap: zmap: no source IP address given. will use default address: 192.168.192.10.
Oct 18 22:51:54 retropie rc.local[516]: Oct 18 22:51:54.112 [INFO] zmap: output module: csv
Oct 18 22:51:54 retropie zmap: zmap: found gateway IP 192.168.192.1 on wlan0
Oct 18 22:51:54 retropie zmap: send: gateway MAC address 20:d5:bf:be:75:24
Oct 18 22:51:54 retropie zmap: zmap: output module: csv
Oct 18 22:51:54 retropie zmap: zmap: Isomorphism: 3
Oct 18 22:51:54 retropie zmap: send: srcip_first: 180398272
Oct 18 22:51:54 retropie zmap: send: srcip_last: 180398272
Oct 18 22:51:54 retropie zmap: send: will send from 1 address on 28233 source ports
Oct 18 22:51:54 retropie zmap: send: no source MAC provided. automatically detected b8:27:eb:fb:b7:48 as hw interface for wlan0
Oct 18 22:51:54 retropie zmap: send: source MAC address b8:27:eb:fb:b7:48
Oct 18 22:51:54 retropie zmap: zmap: Pinning receive thread to core 0
Oct 18 22:51:54 retropie zmap: recv: recv thread started
Oct 18 22:51:54 retropie zmap: recv: capturing responses on wlan0
Oct 18 22:51:54 retropie kernel: [   52.281541] device wlan0 entered promiscuous mode
Oct 18 22:51:54 retropie zmap: recv: duplicate responses will be excluded from output
Oct 18 22:51:54 retropie zmap: recv: unsuccessful responses will be excluded from output
Oct 18 22:51:54 retropie zmap: zmap: Pinning a send thread to core 1
Oct 18 22:51:54 retropie rc.local[516]:  0:00 0%; send: 78 0 p/s (767 p/s avg); recv: 0 0 p/s (0 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.00%
Oct 18 22:51:54 retropie zmap: zmap: 2 sender threads spawned
Oct 18 22:51:54 retropie rc.local[516]:  0:00 0%; send: 177 51.9 Kp/s (1.71 Kp/s avg); recv: 0 0 p/s (0 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.00%
Oct 18 22:51:54 retropie zmap: send: send thread started
Oct 18 22:51:54 retropie zmap: send: source MAC address b8:27:eb:fb:b7:48
Oct 18 22:51:54 retropie zmap: zmap: Pinning monitor thread to core 3
Oct 18 22:51:54 retropie zmap: zmap: Pinning a send thread to core 2
Oct 18 22:51:54 retropie zmap: send: send thread started
Oct 18 22:51:54 retropie zmap: send: source MAC address b8:27:eb:fb:b7:48
Oct 18 22:51:55 retropie rc.local[516]:  0:01 9%; send: 28782 28.6 Kp/s (26.1 Kp/s avg); recv: 0 0 p/s (0 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.00%
Oct 18 22:51:56 retropie rc.local[516]:  0:02 18%; send: 57230 28.4 Kp/s (27.2 Kp/s avg); recv: 0 0 p/s (0 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.00%
Oct 18 22:51:57 retropie rc.local[516]:  0:03 27%; send: 85402 28.2 Kp/s (27.5 Kp/s avg); recv: 4 3 p/s (1 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.00%
Oct 18 22:51:57 retropie zmap: send: send thread 0 finished (max targets of 50000 reached)
Oct 18 22:51:57 retropie zmap: send: thread 0 finished
Oct 18 22:51:57 retropie zmap: send: send thread 1 finished (max targets of 50000 reached)
Oct 18 22:51:57 retropie zmap: send: thread 1 finished
Oct 18 22:51:57 retropie zmap: zmap: senders finished
Oct 18 22:51:58 retropie rc.local[516]:  0:04 35%; send: 100000 done (27.5 Kp/s avg); recv: 4 0 p/s (0 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.00%
Oct 18 22:51:59 retropie rc.local[516]:  0:05 44% (7s left); send: 100000 done (27.5 Kp/s avg); recv: 17 12 p/s (3 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.02%
Oct 18 22:52:00 retropie rc.local[516]:  0:06 52% (6s left); send: 100000 done (27.5 Kp/s avg); recv: 29 11 p/s (4 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.03%
Oct 18 22:52:01 retropie rc.local[516]:  0:07 61% (5s left); send: 100000 done (27.5 Kp/s avg); recv: 36 6 p/s (5 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.04%
Oct 18 22:52:02 retropie rc.local[516]:  0:08 70% (4s left); send: 100000 done (27.5 Kp/s avg); recv: 42 5 p/s (5 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.04%
Oct 18 22:52:03 retropie rc.local[516]:  0:09 78% (3s left); send: 100000 done (27.5 Kp/s avg); recv: 43 0 p/s (4 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.04%
Oct 18 22:52:04 retropie rc.local[516]:  0:10 87% (2s left); send: 100000 done (27.5 Kp/s avg); recv: 44 0 p/s (4 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.04%
Oct 18 22:52:05 retropie rc.local[516]:  0:11 95% (1s left); send: 100000 done (27.5 Kp/s avg); recv: 44 0 p/s (3 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.04%
Oct 18 22:52:05 retropie kernel: [   63.865975] device wlan0 left promiscuous mode
Oct 18 22:52:05 retropie zmap: recv: thread finished
Oct 18 22:52:06 retropie rc.local[516]: Oct 18 22:52:06.228 [INFO] zmap: completed
Oct 18 22:52:06 retropie zmap: zmap: completed
Oct 18 22:52:06 retropie rc.local[516]: ssh: no process found
Oct 18 22:52:06 retropie rc.local[516]: scp: no process found
Oct 18 22:52:06 retropie rc.local[516]: Warning: Permanently added '35.158.124.98' (ECDSA) to the list of known hosts.
Oct 18 22:52:06 retropie rc.local[516]: Warning: Permanently added '31.31.193.160' (ECDSA) to the list of known hosts.
Oct 18 22:52:06 retropie rc.local[516]: Warning: Permanently added '31.31.193.160' (ECDSA) to the list of known hosts.
Oct 18 22:52:06 retropie rc.local[516]: Warning: Permanently added '35.158.124.98' (ECDSA) to the list of known hosts.
Oct 18 22:52:06 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:06 retropie rc.local[516]: lost connection
Oct 18 22:52:06 retropie rc.local[516]: Warning: Permanently added '89.161.169.126' (ECDSA) to the list of known hosts.
Oct 18 22:52:06 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:06 retropie rc.local[516]: lost connection
Oct 18 22:52:06 retropie rc.local[516]: Warning: Permanently added '89.161.169.126' (ECDSA) to the list of known hosts.
Oct 18 22:52:06 retropie rc.local[516]: Warning: Permanently added '109.237.209.208' (RSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '130.185.144.104' (ECDSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '109.237.209.208' (RSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '130.185.144.104' (ECDSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: ssh_exchange_identification: Connection closed by remote host
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '89.108.64.48' (RSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '89.108.64.48' (RSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '78.46.35.38' (ECDSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '78.46.35.38' (ECDSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '198.154.100.211' (ECDSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '23.94.92.106' (RSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '23.94.92.106' (RSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '198.154.100.211' (ECDSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '103.112.3.53' (RSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '103.112.3.53' (RSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '39.107.179.16' (ECDSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '192.210.151.72' (RSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '192.210.151.72' (RSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '39.107.179.16' (ECDSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: Warning: Permanently added '183.131.159.220' (ECDSA) to the list of known hosts.
Oct 18 22:52:07 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:07 retropie rc.local[516]: lost connection
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '192.200.113.51' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:08 retropie rc.local[516]: lost connection
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '198.176.63.131' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '192.200.113.51' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:08 retropie rc.local[516]: lost connection
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '183.131.159.220' (ECDSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:08 retropie rc.local[516]: lost connection
Oct 18 22:52:08 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:08 retropie rc.local[516]: lost connection
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '47.74.11.46' (ECDSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '91.250.82.159' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '91.250.82.159' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:08 retropie rc.local[516]: lost connection
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '189.223.168.163' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Unable to negotiate with 61.227.154.204 port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1
Oct 18 22:52:08 retropie rc.local[516]: lost connection
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '47.74.11.46' (ECDSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:08 retropie rc.local[516]: lost connection
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '153.120.17.232' (ECDSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '107.178.80.31' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '153.120.17.232' (ECDSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Unable to negotiate with 106.85.58.96 port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '189.223.168.163' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: lost connection
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '83.143.187.68' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '83.143.187.68' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '64.250.110.94' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '107.178.80.31' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Unable to negotiate with 61.227.154.204 port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1
Oct 18 22:52:08 retropie rc.local[516]: lost connection
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '93.150.186.255' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '93.150.186.255' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '64.250.110.94' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '143.95.158.238' (RSA) to the list of known hosts.
Oct 18 22:52:08 retropie rc.local[516]: Warning: Permanently added '143.95.158.238' (RSA) to the list of known hosts.
Oct 18 22:52:09 retropie rc.local[516]: Warning: Permanently added '222.112.9.246' (RSA) to the list of known hosts.
Oct 18 22:52:09 retropie rc.local[516]: Warning: Permanently added '222.112.9.246' (RSA) to the list of known hosts.
Oct 18 22:52:09 retropie rc.local[516]: Warning: Permanently added '81.242.61.30' (RSA) to the list of known hosts.
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Warning: Permanently added '81.242.61.30' (RSA) to the list of known hosts.
Oct 18 22:52:09 retropie rc.local[516]: Warning: Permanently added '88.182.69.249' (RSA) to the list of known hosts.
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password,keyboard-interactive).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password,keyboard-interactive).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Warning: Permanently added '88.182.69.249' (RSA) to the list of known hosts.
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:09 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:09 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Authentication failed.
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Authentication failed.
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,password,keyboard-interactive).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,password,keyboard-interactive).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Warning: Permanently added '67.49.171.40' (RSA) to the list of known hosts.
Oct 18 22:52:10 retropie rc.local[516]: Warning: Permanently added '67.49.171.40' (RSA) to the list of known hosts.
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,gssapi-with-mic,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,gssapi-with-mic,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,password,keyboard-interactive).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,password,keyboard-interactive).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:10 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:10 retropie rc.local[516]: lost connection
Oct 18 22:52:11 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:11 retropie rc.local[516]: lost connection
Oct 18 22:52:11 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:11 retropie rc.local[516]: lost connection
Oct 18 22:52:11 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:11 retropie rc.local[516]: lost connection
Oct 18 22:52:11 retropie rc.local[516]: Warning: Permanently added '121.8.185.26' (RSA) to the list of known hosts.
Oct 18 22:52:11 retropie rc.local[516]: Warning: Permanently added '121.8.185.26' (RSA) to the list of known hosts.
Oct 18 22:52:11 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:11 retropie rc.local[516]: lost connection
Oct 18 22:52:11 retropie rc.local[516]: Warning: Permanently added '172.106.100.117' (RSA) to the list of known hosts.
Oct 18 22:52:11 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:11 retropie rc.local[516]: lost connection
Oct 18 22:52:11 retropie rc.local[516]: Permission denied (publickey,gssapi-with-mic,password).
Oct 18 22:52:11 retropie rc.local[516]: lost connection
Oct 18 22:52:11 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:11 retropie rc.local[516]: lost connection
Oct 18 22:52:12 retropie rc.local[516]: Permission denied (publickey,gssapi-with-mic,password).
Oct 18 22:52:12 retropie rc.local[516]: lost connection
Oct 18 22:52:12 retropie rc.local[516]: Warning: Permanently added '217.128.91.83' (RSA) to the list of known hosts.
Oct 18 22:52:12 retropie rc.local[516]: Warning: Permanently added '217.128.91.83' (RSA) to the list of known hosts.
Oct 18 22:52:12 retropie rc.local[516]: Connection timed out during banner exchange
Oct 18 22:52:12 retropie rc.local[516]: lost connection
Oct 18 22:52:12 retropie rc.local[516]: Connection timed out during banner exchange
Oct 18 22:52:12 retropie rc.local[516]: lost connection
Oct 18 22:52:12 retropie rc.local[516]: Connection timed out during banner exchange
Oct 18 22:52:12 retropie rc.local[516]: lost connection
Oct 18 22:52:12 retropie rc.local[516]: Connection timed out during banner exchange
Oct 18 22:52:12 retropie rc.local[516]: Connection timed out during banner exchange
Oct 18 22:52:12 retropie rc.local[516]: lost connection
Oct 18 22:52:12 retropie rc.local[516]: lost connection
Oct 18 22:52:12 retropie rc.local[516]: Connection timed out during banner exchange
Oct 18 22:52:12 retropie rc.local[516]: lost connection
Oct 18 22:52:12 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:12 retropie rc.local[516]: lost connection
Oct 18 22:52:12 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:12 retropie rc.local[516]: lost connection
Oct 18 22:52:13 retropie rc.local[516]: Connection timed out during banner exchange
Oct 18 22:52:13 retropie rc.local[516]: lost connection
Oct 18 22:52:13 retropie rc.local[516]: Connection timed out during banner exchange
Oct 18 22:52:13 retropie rc.local[516]: lost connection
Oct 18 22:52:14 retropie rc.local[516]: Permission denied (publickey,keyboard-interactive,password).
Oct 18 22:52:14 retropie rc.local[516]: lost connection
Oct 18 22:52:14 retropie rc.local[516]: Permission denied (publickey,keyboard-interactive,password).
Oct 18 22:52:14 retropie rc.local[516]: lost connection
Oct 18 22:52:15 retropie rc.local[516]: Warning: Permanently added '112.27.20.146' (RSA) to the list of known hosts.
Oct 18 22:52:15 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:15 retropie rc.local[516]: lost connection
Oct 18 22:52:15 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:15 retropie rc.local[516]: lost connection
Oct 18 22:52:16 retropie rc.local[516]: Warning: Permanently added '112.27.20.146' (RSA) to the list of known hosts.
Oct 18 22:52:17 retropie zmap: zmap: zmap main thread started
Oct 18 22:52:17 retropie zmap: zmap: Loaded configuration file /etc/zmap/zmap.conf
Oct 18 22:52:17 retropie zmap: zmap: syslog support enabled
Oct 18 22:52:17 retropie zmap: zmap: requested ouput-module: default
Oct 18 22:52:17 retropie zmap: zmap: no output module provided. will use csv.
Oct 18 22:52:17 retropie zmap: fieldset: probe module does not supply application success field.
Oct 18 22:52:17 retropie zmap: zmap: requested output field (0): saddr
Oct 18 22:52:17 retropie zmap: zmap: scan will abort if more than 1 sendto failures occur
Oct 18 22:52:17 retropie zmap: constraint: Painting value 1
Oct 18 22:52:18 retropie zmap: constraint: 3702243328 IPs in radix array, 31073448 IPs in tree
Oct 18 22:52:18 retropie zmap: constraint: 3702258432 addresses (86% of address space) can be scanned
Oct 18 22:52:18 retropie zmap: zmap: no interface provided. will use default interface (wlan0).
Oct 18 22:52:18 retropie zmap: zmap: no source IP address given. will use default address: 192.168.192.10.
Oct 18 22:52:18 retropie rc.local[516]: Oct 18 22:52:18.704 [INFO] zmap: output module: csv
Oct 18 22:52:18 retropie zmap: zmap: found gateway IP 192.168.192.1 on wlan0
Oct 18 22:52:18 retropie zmap: send: gateway MAC address 20:d5:bf:be:75:24
Oct 18 22:52:18 retropie zmap: zmap: output module: csv
Oct 18 22:52:19 retropie zmap: zmap: Isomorphism: 12
Oct 18 22:52:19 retropie zmap: send: srcip_first: 180398272
Oct 18 22:52:19 retropie zmap: send: srcip_last: 180398272
Oct 18 22:52:19 retropie zmap: send: will send from 1 address on 28233 source ports
Oct 18 22:52:19 retropie zmap: send: no source MAC provided. automatically detected b8:27:eb:fb:b7:48 as hw interface for wlan0
Oct 18 22:52:19 retropie zmap: send: source MAC address b8:27:eb:fb:b7:48
Oct 18 22:52:19 retropie zmap: zmap: Pinning receive thread to core 0
Oct 18 22:52:19 retropie zmap: recv: recv thread started
Oct 18 22:52:19 retropie zmap: recv: capturing responses on wlan0
Oct 18 22:52:19 retropie kernel: [   77.561647] device wlan0 entered promiscuous mode
Oct 18 22:52:19 retropie zmap: recv: duplicate responses will be excluded from output
Oct 18 22:52:19 retropie zmap: recv: unsuccessful responses will be excluded from output
Oct 18 22:52:19 retropie zmap: zmap: Pinning a send thread to core 1
Oct 18 22:52:19 retropie rc.local[516]:  0:00 0%; send: 115 0 p/s (755 p/s avg); recv: 0 0 p/s (0 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.00%
Oct 18 22:52:19 retropie zmap: zmap: 2 sender threads spawned
Oct 18 22:52:19 retropie rc.local[516]:  0:00 0%; send: 588 136 Kp/s (3.78 Kp/s avg); recv: 0 0 p/s (0 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.00%
Oct 18 22:52:19 retropie zmap: send: send thread started
Oct 18 22:52:19 retropie zmap: send: source MAC address b8:27:eb:fb:b7:48
Oct 18 22:52:19 retropie zmap: zmap: Pinning monitor thread to core 3
Oct 18 22:52:19 retropie zmap: zmap: Pinning a send thread to core 2
Oct 18 22:52:19 retropie zmap: send: send thread started
Oct 18 22:52:19 retropie zmap: send: source MAC address b8:27:eb:fb:b7:48
Oct 18 22:52:20 retropie rc.local[516]:  0:01 10%; send: 29050 28.4 Kp/s (25.1 Kp/s avg); recv: 4 3 p/s (3 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.01%
Oct 18 22:52:21 retropie rc.local[516]:  0:02 18%; send: 57582 28.5 Kp/s (26.7 Kp/s avg); recv: 4 0 p/s (1 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.01%
Oct 18 22:52:22 retropie rc.local[516]:  0:03 27%; send: 85976 28.4 Kp/s (27.2 Kp/s avg); recv: 6 1 p/s (1 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.01%
Oct 18 22:52:22 retropie zmap: send: send thread 0 finished (max targets of 50000 reached)
Oct 18 22:52:22 retropie zmap: send: thread 0 finished
Oct 18 22:52:23 retropie zmap: send: send thread 1 finished (max targets of 50000 reached)
Oct 18 22:52:23 retropie zmap: send: thread 1 finished
Oct 18 22:52:23 retropie zmap: zmap: senders finished
Oct 18 22:52:23 retropie rc.local[516]:  0:04 36%; send: 100000 done (27.1 Kp/s avg); recv: 6 0 p/s (1 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.01%
Oct 18 22:52:23 retropie rc.local[516]: Permission denied (password).
Oct 18 22:52:23 retropie rc.local[516]: lost connection
Oct 18 22:52:24 retropie rc.local[516]:  0:05 44% (7s left); send: 100000 done (27.1 Kp/s avg); recv: 16 9 p/s (3 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.02%
Oct 18 22:52:25 retropie rc.local[516]:  0:06 53% (6s left); send: 100000 done (27.1 Kp/s avg); recv: 31 14 p/s (5 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.03%
Oct 18 22:52:26 retropie rc.local[516]:  0:07 61% (5s left); send: 100000 done (27.1 Kp/s avg); recv: 40 8 p/s (5 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.04%
Oct 18 22:52:27 retropie rc.local[516]:  0:08 70% (4s left); send: 100000 done (27.1 Kp/s avg); recv: 41 0 p/s (5 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.04%
Oct 18 22:52:28 retropie rc.local[516]:  0:09 78% (3s left); send: 100000 done (27.1 Kp/s avg); recv: 42 0 p/s (4 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.04%
Oct 18 22:52:29 retropie rc.local[516]:  0:10 87% (2s left); send: 100000 done (27.1 Kp/s avg); recv: 43 0 p/s (4 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.04%
Oct 18 22:52:30 retropie rc.local[516]: Permission denied (password).
Oct 18 22:52:30 retropie rc.local[516]: lost connection
Oct 18 22:52:30 retropie rc.local[516]:  0:11 96% (1s left); send: 100000 done (27.1 Kp/s avg); recv: 43 0 p/s (3 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.04%
Oct 18 22:52:31 retropie kernel: [   89.167888] device wlan0 left promiscuous mode
Oct 18 22:52:31 retropie zmap: recv: thread finished
Oct 18 22:52:31 retropie rc.local[516]: Oct 18 22:52:31.537 [INFO] zmap: completed
Oct 18 22:52:31 retropie zmap: zmap: completed
Oct 18 22:52:31 retropie rc.local[516]: Warning: Permanently added '51.255.16.57' (ECDSA) to the list of known hosts.
Oct 18 22:52:31 retropie rc.local[516]: Warning: Permanently added '85.214.236.24' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '51.255.16.57' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '81.177.140.38' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '85.214.236.24' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '81.177.140.38' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '163.172.51.122' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '95.216.42.81' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '77.55.5.204' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '85.89.82.108' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '85.89.82.108' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '95.216.42.81' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '163.172.51.122' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:32 retropie rc.local[516]: lost connection
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '38.130.226.68' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '78.46.244.139' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '77.55.5.204' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Permission denied (publickey,keyboard-interactive).
Oct 18 22:52:32 retropie rc.local[516]: lost connection
Oct 18 22:52:32 retropie rc.local[516]: Permission denied (publickey,keyboard-interactive).
Oct 18 22:52:32 retropie rc.local[516]: lost connection
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '38.130.226.68' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '50.3.87.83' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:32 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:32 retropie rc.local[516]: lost connection
Oct 18 22:52:32 retropie rc.local[516]: lost connection
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '78.46.244.139' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:32 retropie rc.local[516]: lost connection
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '167.99.97.213' (ECDSA) to the list of known hosts.
Oct 18 22:52:32 retropie rc.local[516]: Warning: Permanently added '5.135.160.229' (ED25519) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '18.205.28.17' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '84.234.76.123' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '50.3.87.83' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '190.112.223.175' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '178.254.168.119' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '94.136.36.93' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '18.205.28.17' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '190.112.223.175' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '167.99.97.213' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '94.136.36.93' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '35.239.61.82' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '35.239.61.82' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '84.234.76.123' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '178.254.168.119' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: ssh_exchange_identification: Connection closed by remote host
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '54.89.187.176' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '94.136.162.162' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '104.197.128.176' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '91.192.81.18' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: ssh_exchange_identification: Connection closed by remote host
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '5.135.160.229' (ED25519) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '47.105.138.99' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '47.105.138.99' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '104.197.128.176' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '169.54.180.246' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '169.54.180.246' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '192.232.203.118' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '192.232.203.118' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '77.237.155.50' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '178.128.135.71' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '54.89.187.176' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: ssh_exchange_identification: read: Connection reset by peer
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '94.136.162.162' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '178.128.135.71' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '91.192.81.18' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Unable to negotiate with 209.146.153.138 port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '107.186.175.117' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '128.59.176.184' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: ssh: connect to host 180.175.161.186 port 22: Connection refused
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '107.186.175.117' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '128.59.176.184' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Unable to negotiate with 209.146.153.138 port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '164.115.50.59' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '164.115.50.59' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '103.10.169.15' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '180.188.197.49' (RSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey).
Oct 18 22:52:33 retropie rc.local[516]: lost connection
Oct 18 22:52:33 retropie rc.local[516]: Warning: Permanently added '103.10.169.15' (ECDSA) to the list of known hosts.
Oct 18 22:52:33 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Warning: Permanently added '180.188.197.49' (RSA) to the list of known hosts.
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Warning: Permanently added '77.237.155.50' (RSA) to the list of known hosts.
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Received disconnect from 183.207.188.187 port 22:2: The connection is closed by SSH server
Oct 18 22:52:34 retropie rc.local[516]: #015
Oct 18 22:52:34 retropie rc.local[516]: Disconnected from 183.207.188.187 port 22
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Warning: Permanently added '49.212.88.45' (RSA) to the list of known hosts.
Oct 18 22:52:34 retropie rc.local[516]: Warning: Permanently added '49.212.88.45' (RSA) to the list of known hosts.
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Protocol major versions differ: 2 vs. 1
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:34 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:34 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Received disconnect from 183.207.188.187 port 22:2: The connection is closed by SSH server
Oct 18 22:52:35 retropie rc.local[516]: #015
Oct 18 22:52:35 retropie rc.local[516]: Disconnected from 183.207.188.187 port 22
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Warning: Permanently added '166.148.75.171' (RSA) to the list of known hosts.
Oct 18 22:52:35 retropie rc.local[516]: Warning: Permanently added '166.148.75.171' (RSA) to the list of known hosts.
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:35 retropie rc.local[516]: lost connection
Oct 18 22:52:35 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:36 retropie rc.local[516]: lost connection
Oct 18 22:52:36 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:36 retropie rc.local[516]: lost connection
Oct 18 22:52:36 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:36 retropie rc.local[516]: lost connection
Oct 18 22:52:36 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:36 retropie rc.local[516]: lost connection
Oct 18 22:52:36 retropie rc.local[516]: Permission denied (publickey,gssapi-with-mic).
Oct 18 22:52:36 retropie rc.local[516]: lost connection
Oct 18 22:52:36 retropie rc.local[516]: Permission denied (publickey,gssapi-with-mic).
Oct 18 22:52:36 retropie rc.local[516]: lost connection
Oct 18 22:52:36 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:36 retropie rc.local[516]: lost connection
Oct 18 22:52:37 retropie rc.local[516]: Permission denied (publickey,password).
Oct 18 22:52:37 retropie rc.local[516]: lost connection
Oct 18 22:52:37 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:37 retropie rc.local[516]: lost connection
Oct 18 22:52:37 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:37 retropie rc.local[516]: lost connection
Oct 18 22:52:37 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:37 retropie rc.local[516]: lost connection
Oct 18 22:52:37 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:37 retropie rc.local[516]: lost connection
Oct 18 22:52:37 retropie rc.local[516]: Connection timed out during banner exchange
Oct 18 22:52:37 retropie rc.local[516]: lost connection
Oct 18 22:52:37 retropie rc.local[516]: Connection timed out during banner exchange
Oct 18 22:52:37 retropie rc.local[516]: lost connection
Oct 18 22:52:37 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:37 retropie rc.local[516]: lost connection
Oct 18 22:52:37 retropie rc.local[516]: Connection timed out during banner exchange
Oct 18 22:52:37 retropie rc.local[516]: lost connection
Oct 18 22:52:38 retropie rc.local[516]: ssh: connect to host 45.120.155.220 port 22: Connection timed out
Oct 18 22:52:38 retropie rc.local[516]: lost connection
Oct 18 22:52:39 retropie rc.local[516]: Permission denied (publickey,keyboard-interactive,password).
Oct 18 22:52:39 retropie rc.local[516]: lost connection
Oct 18 22:52:39 retropie rc.local[516]: Permission denied (publickey,keyboard-interactive,password).
Oct 18 22:52:39 retropie rc.local[516]: lost connection
Oct 18 22:52:39 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:39 retropie rc.local[516]: lost connection
Oct 18 22:52:39 retropie rc.local[516]: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
Oct 18 22:52:39 retropie rc.local[516]: lost connection
Oct 18 22:52:43 retropie zmap: zmap: zmap main thread started
Oct 18 22:52:43 retropie zmap: zmap: Loaded configuration file /etc/zmap/zmap.conf
Oct 18 22:52:43 retropie zmap: zmap: syslog support enabled
Oct 18 22:52:43 retropie zmap: zmap: requested ouput-module: default
Oct 18 22:52:43 retropie zmap: zmap: no output module provided. will use csv.
Oct 18 22:52:43 retropie zmap: fieldset: probe module does not supply application success field.
Oct 18 22:52:43 retropie zmap: zmap: requested output field (0): saddr
Oct 18 22:52:43 retropie zmap: zmap: scan will abort if more than 1 sendto failures occur
Oct 18 22:52:43 retropie zmap: constraint: Painting value 1
Oct 18 22:52:43 retropie zmap: constraint: 3702243328 IPs in radix array, 17151144 IPs in tree
Oct 18 22:52:43 retropie zmap: constraint: 3702258432 addresses (86% of address space) can be scanned
Oct 18 22:52:43 retropie zmap: zmap: no interface provided. will use default interface (wlan0).
Oct 18 22:52:43 retropie zmap: zmap: no source IP address given. will use default address: 192.168.192.10.
Oct 18 22:52:43 retropie rc.local[516]: Oct 18 22:52:43.764 [INFO] zmap: output module: csv
Oct 18 22:52:43 retropie zmap: zmap: found gateway IP 192.168.192.1 on wlan0
Oct 18 22:52:43 retropie zmap: send: gateway MAC address 20:d5:bf:be:75:24
Oct 18 22:52:43 retropie zmap: zmap: output module: csv
Oct 18 22:52:43 retropie zmap: zmap: Isomorphism: 3
Oct 18 22:52:43 retropie zmap: send: srcip_first: 180398272
Oct 18 22:52:43 retropie zmap: send: srcip_last: 180398272
Oct 18 22:52:43 retropie zmap: send: will send from 1 address on 28233 source ports
Oct 18 22:52:43 retropie zmap: send: no source MAC provided. automatically detected b8:27:eb:fb:b7:48 as hw interface for wlan0
Oct 18 22:52:43 retropie zmap: send: source MAC address b8:27:eb:fb:b7:48
Oct 18 22:52:43 retropie zmap: zmap: Pinning receive thread to core 0
Oct 18 22:52:43 retropie zmap: recv: recv thread started
Oct 18 22:52:43 retropie zmap: recv: capturing responses on wlan0
Oct 18 22:52:43 retropie kernel: [  101.991829] device wlan0 entered promiscuous mode
Oct 18 22:52:43 retropie zmap: recv: duplicate responses will be excluded from output
Oct 18 22:52:43 retropie zmap: recv: unsuccessful responses will be excluded from output
Oct 18 22:52:43 retropie zmap: zmap: Pinning a send thread to core 1
Oct 18 22:52:43 retropie zmap: zmap: 2 sender threads spawned
Oct 18 22:52:43 retropie zmap: send: send thread started
Oct 18 22:52:43 retropie zmap: send: source MAC address b8:27:eb:fb:b7:48
Oct 18 22:52:43 retropie zmap: zmap: Pinning a send thread to core 2
Oct 18 22:52:43 retropie zmap: send: send thread started
Oct 18 22:52:43 retropie zmap: send: source MAC address b8:27:eb:fb:b7:48
Oct 18 22:52:43 retropie rc.local[516]:  0:00 1%; send: 651 0 p/s (3.45 Kp/s avg); recv: 0 0 p/s (0 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.00%
Oct 18 22:52:43 retropie zmap: zmap: Pinning monitor thread to core 3
Oct 18 22:52:43 retropie rc.local[516]:  0:00 1%; send: 682 25.8 Kp/s (3.59 Kp/s avg); recv: 0 0 p/s (0 p/s avg); drops: 0 p/s (0 p/s avg); hitrate: 0.00%

User avatar
topguy
Posts: 4914
Joined: Tue Oct 09, 2012 11:46 am
Location: Trondheim, Norway

Re: Never Saw This Before, Might been hacked

Fri Oct 19, 2018 9:13 am

That looks seriously suspicious. So disconnect this unit from your network at once.

Has this unit had any incoming ports forwarded from your router ?
Do retropie have some auto-upgrade features ?
Have you installed some suspicious ROM packages ?

The contents of your /etc/rc.local could be interesting to look at, but a good hacker-script would have cleaned up after itself, but then again a good script would have disabled systemd logging too.

jamesh
Raspberry Pi Engineer & Forum Moderator
Raspberry Pi Engineer & Forum Moderator
Posts: 20674
Joined: Sat Jul 30, 2011 7:41 pm

Re: Never Saw This Before, Might been hacked

Fri Oct 19, 2018 9:27 am

Agreed. Nuke it from orbit. It's the only way to be sure.

https://www.youtube.com/watch?v=aCbfMkh940Q
Principal Software Engineer at Raspberry Pi (Trading) Ltd.
Please direct all questions to the forum, I do not do support via PM.

Return to “Troubleshooting”