Router försöker accessa min server?
Hej!
Har en FreeBSD server där jag kör pf brandvägg och sshguard. Kollade igenom auth loggarna och upptäckte en skum sak.
Apr 4 08:09:33 charlie sshd[74957]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:33 charlie sshd[74957]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:33 charlie sshd[74957]: Postponed keyboard-interactive for sijohans from 192.168.1.1 port 59225 ssh2 [preauth]
Apr 4 08:09:33 charlie sshd[74957]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:33 charlie sshd[74957]: Connection closed by 192.168.1.1 [preauth]
Apr 4 08:09:33 charlie sshd[74962]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:33 charlie sshd[74962]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:33 charlie sshd[74962]: Postponed keyboard-interactive for sijohans from 192.168.1.1 port 59226 ssh2 [preauth]
Apr 4 08:09:33 charlie sshguard[1108]: Blocking 84.237.221.154:4 for >5400secs: 30 danger in 3 attacks over 0 seconds (all: 30d in 1 abuses over 0s).
Apr 4 08:09:33 charlie sshd[74962]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:33 charlie sshd[74962]: Connection closed by 192.168.1.1 [preauth]
Apr 4 08:09:33 charlie sshd[74968]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:33 charlie sshd[74968]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:33 charlie sshd[74968]: Postponed keyboard-interactive for sijohans from 192.168.1.1 port 59227 ssh2 [preauth]
Apr 4 08:09:33 charlie sshd[74968]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:33 charlie sshd[74968]: Connection closed by 192.168.1.1 [preauth]
Apr 4 08:09:33 charlie sshd[74973]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:33 charlie sshguard[1108]: Blocking 192.168.1.1:4 for >5400secs: 30 danger in 3 attacks over 0 seconds (all: 30d in 1 abuses over 0s).
Apr 4 08:09:34 charlie sshd[74973]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:34 charlie sshd[74973]: Postponed keyboard-interactive for sijohans from 192.168.1.1 port 59228 ssh2 [preauth]
Apr 4 08:09:34 charlie sshd[74973]: error: PAM: authentication error for sijohans from 192.168.1.1
Apr 4 08:09:34 charlie sshd[74973]: Connection closed by 192.168.1.1 [preauth]
Apr 4 09:49:51 charlie sshd[75891]: Invalid user library from 84.237.221.154
Apr 4 09:49:51 charlie sshd[75891]: input_userauth_request: invalid user library [preauth]
Apr 4 09:49:51 charlie sshd[75891]: Connection closed by 84.237.221.154 [preauth]
Apr 4 10:33:43 charlie sshd[76347]: Invalid user info from 84.237.221.154
Apr 4 10:33:43 charlie sshd[76347]: input_userauth_request: invalid user info [preauth]
Apr 4 10:33:43 charlie sshguard[1108]: Offender '192.168.1.1:4' scored 60 danger in 2 abuses (threshold 40) -> blacklisted.
Apr 4 10:33:43 charlie sshguard[1108]: Blocking 192.168.1.1:4 for >0secs: 30 danger in 3 attacks over 2632 seconds (all: 60d in 2 abuses over 8650s).
Min router försöker göra någonting? Vad? Detta har jag inte sätt tidigare. Det finns ett konto sijohans på freebsd servern, men vad har routern med detta att göra? Mitt användarnamn på min macbook är också sijohans men den var avstängd under tiden detta skedde (tror jag iallafall). Min router är en asus RT-N66U
http://www.asus.com/Networking/RTN66U/
Vad är detta "error: PAM: authentication error for" ?
Något förslag? Jag har extremt många breakin attemps varje dag men har starka lösenord samt att dessa blockeras så det borde inte vara någon fara. Har funderat på att byta ssh port.