Il y a quelques temps j’ai été victime d’une attaque ssh.
Je ne comprend pas comment cela a pu arriver puisque j’étais connecté derriere la freebox sans aucune redirection de ports. Si j’ai bien compris on ne peut pas accéder a une machine placer derrière un routeur NAT sans que les ports soit rediriger?
"messages" est très clair:
Jul 9 13:07:56 linux sshd[13051]: Invalid user aa from 64.182.81.168
Jul 9 13:07:58 linux sshd[13053]: Invalid user aaa from 64.182.81.168
Jul 9 13:07:59 linux sshd[13055]: Invalid user aaaa from 64.182.81.168
Jul 9 13:08:06 linux sshd[13057]: Invalid user aaaaa from 64.182.81.168
Jul 9 13:08:09 linux sshd[13059]: Invalid user aaaaaa from 64.182.81.168
Jul 9 13:08:15 linux sshd[13061]: Invalid user aaliyah from 64.182.81.168
Jul 9 13:08:22 linux sshd[13063]: Invalid user aaron from 64.182.81.168
Jul 9 13:08:29 linux sshd[13065]: Invalid user aaron from 64.182.81.168
Jul 9 13:08:31 linux sshd[13067]: Invalid user aba from 64.182.81.168
Jul 9 13:08:34 linux sshd[13069]: Invalid user ab from 64.182.81.168
Jul 9 13:08:40 linux sshd[13071]: Invalid user abc from 64.182.81.168
Jul 9 13:08:48 linux sshd[13073]: Invalid user abe from 64.182.81.168
Jul 9 13:08:49 linux sshd[13075]: Invalid user abel from 64.182.81.168
Jul 9 13:08:56 linux sshd[13077]: Invalid user abraham from 64.182.81.168
Jul 9 13:09:03 linux sshd[13079]: Invalid user abuse from 64.182.81.168
Jul 9 13:09:10 linux sshd[13081]: Invalid user academy from 64.182.81.168
Jul 9 13:09:12 linux sshd[13083]: Invalid user access from 64.182.81.168
Jul 9 13:09:19 linux sshd[13085]: Invalid user ace from 64.182.81.168
Jul 9 13:09:21 linux sshd[13087]: Invalid user achim from 64.182.81.168
Jul 9 13:09:22 linux sshd[13089]: Invalid user acid from 64.182.81.168
Jul 9 13:09:24 linux sshd[13091]: Invalid user ada from 64.182.81.168
Jul 9 13:09:31 linux sshd[13093]: Invalid user adabas from 64.182.81.168
Jul 9 13:09:38 linux sshd[13095]: Invalid user adam from 64.182.81.168
Jul 9 13:09:41 linux sshd[13097]: Invalid user add from 64.182.81.168
Jul 9 13:09:48 linux sshd[13099]: Invalid user addi from 64.182.81.168
Jul 9 13:09:54 linux sshd[13101]: Invalid user address from 64.182.81.168
Jul 9 13:10:01 linux sshd[13103]: Invalid user adela from 64.182.81.168
Jul 9 13:10:03 linux sshd[13105]: Invalid user adeline from 64.182.81.168
Jul 9 13:10:09 linux sshd[13107]: Invalid user adi from 64.182.81.168
Jul 9 13:10:13 linux sshd[13109]: Invalid user adina from 64.182.81.168
Jul 9 13:10:19 linux sshd[13111]: Invalid user adine from 64.182.81.168
Jul 9 13:10:22 linux sshd[13113]: Invalid user adm from 64.182.81.168
Jul 9 13:10:31 linux sshd[13115]: Invalid user admin from 64.182.81.168
Jul 9 13:10:33 linux sshd[13117]: Invalid user admin from 64.182.81.168
Jul 9 13:10:36 linux sshd[13119]: Invalid user admin from 64.182.81.168
Jul 9 13:10:38 linux sshd[13121]: Invalid user admin from 64.182.81.168
Jul 9 13:10:44 linux sshd[13123]: Invalid user admin from 64.182.81.168
Jul 9 13:10:54 linux sshd[13125]: Invalid user administracion from 64.182.81.168
Jul 9 13:10:56 linux sshd[13127]: Invalid user administrator from 64.182.81.168
Jul 9 13:11:03 linux sshd[13129]: Invalid user administrator from 64.182.81.168
Jul 9 13:11:13 linux sshd[13131]: Invalid user admin from 64.182.81.168
Jul 9 13:11:15 linux sshd[13133]: Invalid user admin from 64.182.81.168
Jul 9 13:11:21 linux sshd[13135]: Invalid user admins from 64.182.81.168
Jul 9 13:11:31 linux sshd[13137]: Invalid user admins from 64.182.81.168