Also, jetzt nochmal was mich beunrühigt hatr. Ich habe mal Testhalber in die auth.log geschaut. Da ist mir etwas komisches aufgefallen, und zwar wurden innerhalb von wenigen Sekunden bestimmt 100 Zeilen in den Log geschrieben. Hier mal kurz die Zeilen
Dec 22 18:17:40 HomeServer sshd[2818]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:17:42 HomeServer sshd[2822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:17:45 HomeServer sshd[2822]: Failed password for bin from 1.234.2.81 port 48490 ssh2
Dec 22 18:17:45 HomeServer sshd[2822]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:17:47 HomeServer sshd[2827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:17:49 HomeServer sshd[2827]: Failed password for bin from 1.234.2.81 port 49740 ssh2
Dec 22 18:17:50 HomeServer sshd[2827]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:17:52 HomeServer sshd[2831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:17:54 HomeServer sshd[2831]: Failed password for bin from 1.234.2.81 port 50864 ssh2
Dec 22 18:17:54 HomeServer sshd[2831]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:17:57 HomeServer sshd[2835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:17:59 HomeServer sshd[2835]: Failed password for bin from 1.234.2.81 port 51983 ssh2
Dec 22 18:18:00 HomeServer sshd[2835]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:03 HomeServer sshd[2839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:05 HomeServer sshd[2839]: Failed password for bin from 1.234.2.81 port 53464 ssh2
Dec 22 18:18:05 HomeServer sshd[2839]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:07 HomeServer sshd[2843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:10 HomeServer sshd[2843]: Failed password for bin from 1.234.2.81 port 54600 ssh2
Dec 22 18:18:10 HomeServer sshd[2843]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:12 HomeServer sshd[2847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:14 HomeServer sshd[2847]: Failed password for bin from 1.234.2.81 port 55771 ssh2
Dec 22 18:18:14 HomeServer sshd[2847]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:17 HomeServer sshd[2851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:19 HomeServer sshd[2851]: Failed password for bin from 1.234.2.81 port 56841 ssh2
Dec 22 18:18:20 HomeServer sshd[2851]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:22 HomeServer sshd[2855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:24 HomeServer sshd[2855]: Failed password for bin from 1.234.2.81 port 58165 ssh2
Dec 22 18:18:24 HomeServer sshd[2855]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:27 HomeServer sshd[2859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:30 HomeServer sshd[2859]: Failed password for bin from 1.234.2.81 port 59292 ssh2
Dec 22 18:18:30 HomeServer sshd[2859]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:32 HomeServer sshd[2863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:35 HomeServer sshd[2863]: Failed password for bin from 1.234.2.81 port 60592 ssh2
Dec 22 18:18:35 HomeServer sshd[2863]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:38 HomeServer sshd[2867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:39 HomeServer sshd[2867]: Failed password for bin from 1.234.2.81 port 33637 ssh2
Dec 22 18:18:40 HomeServer sshd[2867]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:42 HomeServer sshd[2871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:44 HomeServer sshd[2871]: Failed password for bin from 1.234.2.81 port 34747 ssh2
Dec 22 18:18:44 HomeServer sshd[2871]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:47 HomeServer sshd[2875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:48 HomeServer sshd[2875]: Failed password for bin from 1.234.2.81 port 35896 ssh2
Dec 22 18:18:48 HomeServer sshd[2875]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:51 HomeServer sshd[2879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:54 HomeServer sshd[2879]: Failed password for bin from 1.234.2.81 port 36903 ssh2
Dec 22 18:18:54 HomeServer sshd[2879]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:18:58 HomeServer sshd[2884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:18:59 HomeServer sshd[2884]: Failed password for bin from 1.234.2.81 port 38238 ssh2
Dec 22 18:19:00 HomeServer sshd[2884]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:19:02 HomeServer sshd[2888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:19:05 HomeServer sshd[2888]: Failed password for bin from 1.234.2.81 port 39620 ssh2
Dec 22 18:19:05 HomeServer sshd[2888]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:19:08 HomeServer sshd[2892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:19:09 HomeServer sshd[2892]: Failed password for bin from 1.234.2.81 port 40911 ssh2
Dec 22 18:19:10 HomeServer sshd[2892]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Dec 22 18:19:12 HomeServer sshd[2896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.234.2.81 user=bin
Dec 22 18:19:14 HomeServer sshd[2896]: Failed password for bin from 1.234.2.81 port 42026 ssh2
Dec 22 18:19:14 HomeServer sshd[2896]: Received disconnect from 1.234.2.81: 11: Bye Bye [preauth]
Alles anzeigen
Sorry, hab den Spoiler irgendwie nicht gefunden, und es deswegen in die Code Tages gepackt.
So geht es noch bestimmt 20 Sek lang weiter. Kann mir das aber irgendwie nicht erklären.
Wenn ich die Ip im Browser eingebe, komm ich nur auf eine chinesische Seite. Was ist da eigentlich gerade auf meinem PI los???
Dann ab 21 Uhr ändert sich das ganze in das
Dec 22 21:16:25 HomeServer sshd[5723]: Received disconnect from 95.39.18.178: 11: Bye Bye [preauth]
Dec 22 21:16:26 HomeServer sshd[5727]: Invalid user john from 95.39.18.178
Der Username der versucht wird variert immer mal john mal chuck usw