I am using an Aiport Extreme as my wireless router, and it has port forwarding set up but disabled for SSH:
However, I keep seeing instances of ssh login attempts from outside -- someone is trying to access my computer using a series of user names. Moreover, I can still log in from outside my home network using SSH, so I know it's open to the world.
How is this happening? How do I stop it?
Here is the log for a connection attempt:
==> /var/log/system.log <== Apr 10 10:36:41: --- last message repeated 8 times --- Apr 10 10:36:41 null-3 sandboxd: sshd(68515) deny mach-per-user-lookup ==> /var/log/secure.log <== Apr 10 10:36:43 null-3 sshd: Invalid user presto from 220.127.116.11