Ich hab mal die logs, wie man sieht hat alles noch bis 10:00 Uhr funktioniert, danach nicht mehr.
2020-07-18T10:07:28+02:00 Zapf-NAS sshd[20878]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T10:07:43+02:00 Zapf-NAS sshd[20878]: pam_unix(sshd:session): session closed for user admin
2020-07-18T10:07:44+02:00 Zapf-NAS sshd[20891]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T10:07:45+02:00 Zapf-NAS sshd[20891]: pam_unix(sshd:session): session closed for user admin
2020-07-18T10:07:46+02:00 Zapf-NAS sshd[20898]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T10:07:47+02:00 Zapf-NAS sshd[20898]: pam_unix(sshd:session): session closed for user admin
2020-07-18T10:07:49+02:00 Zapf-NAS sshd[20906]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T10:07:50+02:00 Zapf-NAS sshd[20906]: pam_unix(sshd:session): session closed for user admin
2020-07-18T10:07:52+02:00 Zapf-NAS sshd[20913]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T10:07:55+02:00 Zapf-NAS sshd[20913]: pam_unix(sshd:session): session closed for user admin
2020-07-18T10:07:57+02:00 Zapf-NAS sshd[20924]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T10:07:58+02:00 Zapf-NAS sshd[20924]: pam_unix(sshd:session): session closed for user admin
2020-07-18T10:08:01+02:00 Zapf-NAS sshd[20932]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T10:08:25+02:00 Zapf-NAS sshd[20932]: pam_unix(sshd:session): session closed for user admin
2020-07-18T10:15:12+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[21131]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T10:17:41+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[22269]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T10:17:59+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[22336]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T12:20:55+02:00 Zapf-NAS sshd[26599]: error: Received disconnect from 62.68.7.104 port 37586:3: [preauth]
2020-07-18T12:20:59+02:00 Zapf-NAS sshd[26606]: error: Received disconnect from 62.68.7.104 port 37588:3: [preauth]
2020-07-18T12:21:02+02:00 Zapf-NAS sshd[26613]: error: Received disconnect from 62.68.7.104 port 61285:3: [preauth]
2020-07-18T12:21:06+02:00 Zapf-NAS sshd[26619]: error: Received disconnect from 62.68.7.104 port 37598:3: [preauth]
2020-07-18T12:21:16+02:00 Zapf-NAS sshd[26633]: error: Received disconnect from 62.68.7.104 port 37604:3: [preauth]
2020-07-18T12:24:25+02:00 Zapf-NAS sshd[26748]: error: Received disconnect from 62.68.7.104 port 38172:3: [preauth]
2020-07-18T12:24:54+02:00 Zapf-NAS sshd[26758]: error: Received disconnect from 62.68.7.104 port 38174:3: [preauth]
2020-07-18T12:24:57+02:00 Zapf-NAS sshd[26764]: error: Received disconnect from 62.68.7.104 port 38176:3: [preauth]
2020-07-18T12:25:00+02:00 Zapf-NAS sshd[26769]: error: Received disconnect from 62.68.7.104 port 38178:3: [preauth]
2020-07-18T12:25:56+02:00 Zapf-NAS sshd[26789]: error: Received disconnect from 62.68.7.104 port 38188:3: [preauth]
2020-07-18T12:26:51+02:00 Zapf-NAS sshd[26812]: error: Received disconnect from 62.68.7.104 port 38190:3: java.io.IOException: Server key mismatch [preauth]
2020-07-18T12:26:56+02:00 Zapf-NAS sshd[26816]: error: Received disconnect from 62.68.7.104 port 38192:3: [preauth]
2020-07-18T12:26:59+02:00 Zapf-NAS sshd[26819]: error: Received disconnect from 62.68.7.104 port 38194:3: [preauth]
2020-07-18T12:27:03+02:00 Zapf-NAS sshd[26823]: error: Received disconnect from 62.68.7.104 port 38196:3: [preauth]
2020-07-18T12:45:33+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[27407]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T12:46:40+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[27927]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T12:46:42+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[27933]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T12:50:05+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[28926]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T12:51:11+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T12:51:11+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T12:54:44+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T12:54:44+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T12:54:53+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T12:54:53+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T12:55:13+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T12:55:14+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T12:55:16+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T12:55:17+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T12:55:18+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T12:55:19+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T12:55:20+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T12:55:21+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T12:55:23+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T12:55:23+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T12:55:26+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T12:55:26+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T12:58:01+02:00 Zapf-NAS sshd[10526]: error: Received disconnect from 62.68.7.104 port 38302:3: [preauth]
2020-07-18T12:58:22+02:00 Zapf-NAS sshd[11425]: error: Received disconnect from 62.68.7.104 port 38306:3: [preauth]
2020-07-18T12:58:31+02:00 Zapf-NAS sshd[11736]: error: Received disconnect from 62.68.7.104 port 38308:3: [preauth]
2020-07-18T12:58:43+02:00 Zapf-NAS su: pam_unix(su-l:session): session opened for user VideoStation by (uid=0)
2020-07-18T12:58:43+02:00 Zapf-NAS sudo: root : TTY=unknown ; PWD=/ ; USER=SynologyApplicationService ; COMMAND=/usr/bin/psql -lqt
2020-07-18T12:58:43+02:00 Zapf-NAS sudo: pam_unix(sudo:session): session opened for user SynologyApplicationService by (uid=0)
2020-07-18T12:58:47+02:00 Zapf-NAS sudo: pam_unix(sudo:session): session closed for user SynologyApplicationService
2020-07-18T12:58:47+02:00 Zapf-NAS su: pam_unix(su-l:session): session closed for user VideoStation
2020-07-18T12:58:48+02:00 Zapf-NAS su: pam_unix(su-l:session): session opened for user VideoStation by (uid=0)
2020-07-18T12:58:50+02:00 Zapf-NAS sudo: root : TTY=unknown ; PWD=/ ; USER=SynologyApplicationService ; COMMAND=/usr/bin/psql -t -d ong -c select version from sql_version order by version desc limit 1;
2020-07-18T12:58:50+02:00 Zapf-NAS sudo: pam_unix(sudo:session): session opened for user SynologyApplicationService by (uid=0)
2020-07-18T12:58:50+02:00 Zapf-NAS su: pam_unix(su-l:session): session closed for user VideoStation
2020-07-18T12:58:50+02:00 Zapf-NAS su: pam_unix(su-l:session): session opened for user VideoStation by (uid=0)
2020-07-18T12:58:51+02:00 Zapf-NAS sudo: pam_unix(sudo:session): session closed for user SynologyApplicationService
2020-07-18T12:58:51+02:00 Zapf-NAS su: pam_unix(su-l:session): session closed for user VideoStation
2020-07-18T12:58:51+02:00 Zapf-NAS su: pam_unix(su-l:session): session opened for user VideoStation by (uid=0)
2020-07-18T12:58:52+02:00 Zapf-NAS su: pam_unix(su-l:session): session closed for user VideoStation
2020-07-18T12:58:53+02:00 Zapf-NAS su: pam_unix(su-l:session): session opened for user VideoStation by (uid=0)
2020-07-18T12:58:53+02:00 Zapf-NAS su: pam_unix(su-l:session): session closed for user VideoStation
2020-07-18T12:58:53+02:00 Zapf-NAS su: pam_unix(su-l:session): session opened for user VideoStation by (uid=0)
2020-07-18T12:58:54+02:00 Zapf-NAS su: pam_unix(su-l:session): session closed for user VideoStation
2020-07-18T12:58:54+02:00 Zapf-NAS su: pam_unix(su-l:session): session opened for user VideoStation by (uid=0)
2020-07-18T12:58:54+02:00 Zapf-NAS su: pam_unix(su-l:session): session closed for user VideoStation
2020-07-18T12:58:54+02:00 Zapf-NAS su: pam_unix(su-l:session): session opened for user VideoStation by (uid=0)
2020-07-18T12:58:55+02:00 Zapf-NAS su: pam_unix(su-l:session): session closed for user VideoStation
2020-07-18T12:58:55+02:00 Zapf-NAS su: pam_unix(su-l:session): session opened for user VideoStation by (uid=0)
2020-07-18T12:58:57+02:00 Zapf-NAS su: pam_unix(su-l:session): session closed for user VideoStation
2020-07-18T12:58:57+02:00 Zapf-NAS su: pam_unix(su-l:session): session opened for user VideoStation by (uid=0)
2020-07-18T12:58:58+02:00 Zapf-NAS su: pam_unix(su-l:session): session closed for user VideoStation
2020-07-18T12:59:02+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T12:59:02+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T12:59:17+02:00 Zapf-NAS sshd[12811]: error: Received disconnect from 62.68.7.104 port 38310:3: [preauth]
2020-07-18T12:59:42+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user PhotoStation by (uid=0)
2020-07-18T12:59:44+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user PhotoStation
2020-07-18T12:59:50+02:00 Zapf-NAS sudo: root : TTY=unknown ; PWD=/ ; USER=synocalendar ; COMMAND=/usr/local/bin/php72 -d open_basedir=/ /var/packages/Calendar/target/davical/scripts/syno-tz-check.php
2020-07-18T12:59:50+02:00 Zapf-NAS sudo: pam_unix(sudo:session): session opened for user synocalendar by (uid=0)
2020-07-18T12:59:54+02:00 Zapf-NAS sudo: pam_unix(sudo:session): session closed for user synocalendar
2020-07-18T13:02:19+02:00 Zapf-NAS sshd[14340]: error: Received disconnect from 62.68.7.104 port 38316:3: java.io.IOException: Server key mismatch [preauth]
2020-07-18T13:02:24+02:00 Zapf-NAS sshd[14344]: error: Received disconnect from 62.68.7.104 port 38318:3: [preauth]
2020-07-18T13:02:28+02:00 Zapf-NAS sshd[14347]: error: Received disconnect from 62.68.7.104 port 38320:3: [preauth]
2020-07-18T13:02:31+02:00 Zapf-NAS sshd[14352]: error: Received disconnect from 62.68.7.104 port 38322:3: [preauth]
2020-07-18T13:02:56+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[14378]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T13:04:50+02:00 Zapf-NAS sshd[14625]: error: Received disconnect from 62.68.7.104 port 38328:3: [preauth]
2020-07-18T13:04:53+02:00 Zapf-NAS sshd[14638]: error: Received disconnect from 62.68.7.104 port 38330:3: [preauth]
2020-07-18T13:04:56+02:00 Zapf-NAS sshd[14641]: error: Received disconnect from 62.68.7.104 port 38332:3: [preauth]
2020-07-18T13:05:26+02:00 Zapf-NAS sshd[14702]: error: Received disconnect from 62.68.7.104 port 38334:3: [preauth]
2020-07-18T13:05:42+02:00 Zapf-NAS sshd[14733]: error: Received disconnect from 62.68.7.104 port 38338:3: [preauth]
2020-07-18T13:05:46+02:00 Zapf-NAS sshd[14748]: error: Received disconnect from 62.68.7.104 port 38342:3: [preauth]
2020-07-18T13:14:22+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:14:22+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:15:47+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:15:47+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:16:19+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:16:19+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:16:25+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:16:25+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:16:31+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:16:31+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:16:39+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:16:39+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:16:46+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:16:46+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:16:55+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:16:55+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:17:04+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:17:04+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:17:12+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:17:12+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:17:19+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:17:19+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:17:27+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T13:17:27+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres
2020-07-18T13:18:55+02:00 Zapf-NAS sshd[16346]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T13:18:55+02:00 Zapf-NAS sshd[16346]: pam_unix(sshd:session): session closed for user admin
2020-07-18T13:19:50+02:00 Zapf-NAS sshd[16476]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T13:19:50+02:00 Zapf-NAS sshd[16476]: pam_unix(sshd:session): session closed for user admin
2020-07-18T13:20:29+02:00 Zapf-NAS sshd[16549]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T13:20:30+02:00 Zapf-NAS sshd[16549]: pam_unix(sshd:session): session closed for user admin
2020-07-18T13:21:47+02:00 Zapf-NAS sshd[16858]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T13:21:47+02:00 Zapf-NAS sshd[16858]: pam_unix(sshd:session): session closed for user admin
2020-07-18T13:24:49+02:00 Zapf-NAS sshd[17615]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T13:24:49+02:00 Zapf-NAS sshd[17615]: pam_unix(sshd:session): session closed for user admin
2020-07-18T13:27:37+02:00 Zapf-NAS sshd[17888]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T13:27:37+02:00 Zapf-NAS sshd[17888]: pam_unix(sshd:session): session closed for user admin
2020-07-18T13:33:26+02:00 Zapf-NAS sshd[18484]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T13:33:27+02:00 Zapf-NAS sshd[18484]: pam_unix(sshd:session): session closed for user admin
2020-07-18T13:34:10+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[18581]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T13:36:28+02:00 Zapf-NAS sshd[18867]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T13:36:28+02:00 Zapf-NAS sshd[18867]: pam_unix(sshd:session): session closed for user admin
2020-07-18T13:39:51+02:00 Zapf-NAS sshd[19282]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T13:39:51+02:00 Zapf-NAS sshd[19282]: pam_unix(sshd:session): session closed for user admin
2020-07-18T13:43:58+02:00 Zapf-NAS sshd[19380]: error: Received disconnect from 89.204.130.202 port 20606:3: [preauth]
2020-07-18T13:44:04+02:00 Zapf-NAS sshd[19384]: error: Received disconnect from 89.204.130.202 port 16831:3: [preauth]
2020-07-18T13:44:07+02:00 Zapf-NAS sshd[19387]: error: Received disconnect from 89.204.130.202 port 14791:3: java.io.IOException: verify: false [preauth]
2020-07-18T13:49:05+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[19516]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T13:54:49+02:00 Zapf-NAS sshd[20261]: error: Received disconnect from 89.204.130.202 port 12421:3: [preauth]
2020-07-18T13:57:18+02:00 Zapf-NAS synoscimprofile: ../..//include/provisioning/../dao/BaseDao.h:21 ERROR: setresuid(-1, 0, -1) [Operation not permitted]
2020-07-18T13:57:18+02:00 Zapf-NAS synoscimprofile: ../..//include/provisioning/../dao/BaseDao.h:21 ERROR: setresuid(-1, 0, -1) [Operation not permitted]
2020-07-18T13:57:18+02:00 Zapf-NAS synoscimprofile: ../..//include/provisioning/../dao/BaseDao.h:21 ERROR: setresuid(-1, 0, -1) [Operation not permitted]
2020-07-18T14:00:53+02:00 Zapf-NAS sshd[21174]: pam_unix(sshd:session): session opened for user Zapf by (uid=0)
2020-07-18T14:00:53+02:00 Zapf-NAS sshd[21174]: pam_unix(sshd:session): session closed for user Zapf
2020-07-18T14:01:36+02:00 Zapf-NAS synoscimprofile: ../..//include/provisioning/../dao/BaseDao.h:21 ERROR: setresuid(-1, 0, -1) [Operation not permitted]
2020-07-18T14:01:36+02:00 Zapf-NAS synoscimprofile: ../..//include/provisioning/../dao/BaseDao.h:21 ERROR: setresuid(-1, 0, -1) [Operation not permitted]
2020-07-18T14:01:36+02:00 Zapf-NAS synoscimprofile: ../..//include/provisioning/../dao/BaseDao.h:21 ERROR: setresuid(-1, 0, -1) [Operation not permitted]
2020-07-18T14:03:50+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[21774]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T14:04:05+02:00 Zapf-NAS sshd[21687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.178.38
2020-07-18T14:04:05+02:00 Zapf-NAS sshd[21687]: pam_syno_log_fail(sshd:auth): Can't get user uid (admin sudo -i).
2020-07-18T14:04:34+02:00 Zapf-NAS sshd[21687]: pam_syno_log_fail(sshd:auth): Can't get user uid (admin sudo -i).
2020-07-18T14:04:48+02:00 Zapf-NAS sshd: SYSTEM: Last message 'pam_syno_log_fail(ss' repeated 1 times, suppressed by syslog-ng on Zapf-NAS
2020-07-18T14:04:48+02:00 Zapf-NAS sshd[21687]: pam_syno_log_fail(sshd:auth): Can't get user uid (admin sudo -i).
2020-07-18T14:06:16+02:00 Zapf-NAS sshd[22126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.178.38
2020-07-18T14:06:16+02:00 Zapf-NAS sshd[22126]: pam_syno_log_fail(sshd:auth): Can't get user uid (admin sudo -i).
2020-07-18T14:06:29+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[22152]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T14:08:16+02:00 Zapf-NAS sshd[22265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.178.38 user=admin
2020-07-18T14:09:30+02:00 Zapf-NAS sshd[22305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.178.38
2020-07-18T14:09:30+02:00 Zapf-NAS sshd[22305]: pam_syno_log_fail(sshd:auth): Can't get user uid (admin sudo).
2020-07-18T14:10:50+02:00 Zapf-NAS sshd[22415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.178.38
2020-07-18T14:10:50+02:00 Zapf-NAS sshd[22415]: pam_syno_log_fail(sshd:auth): Can't get user uid (admin sudo -i).
2020-07-18T14:17:20+02:00 Zapf-NAS sshd[23667]: pam_unix(sshd:session): session opened for user admin by (uid=0)
2020-07-18T14:45:52+02:00 Zapf-NAS sshd[23667]: pam_unix(sshd:session): session closed for user admin
2020-07-18T14:50:33+02:00 Zapf-NAS synoscgi_SYNO.Core.Desktop.Initdata_1_get[26787]: ERROR: initgroups(PhotoStation, 138862) [Operation not permitted]
2020-07-18T14:51:38+02:00 Zapf-NAS su: pam_unix(su:session): session opened for user postgres by (uid=0)
2020-07-18T14:51:38+02:00 Zapf-NAS su: pam_unix(su:session): session closed for user postgres