I am pretty new in this, and I am working on a home automation project where my Pi should be accessed from the outside world and some slave Arduinos should perform tasks like monitoring the environment and turning devices on and off. A couple of weeks ago I installed Django with Apache server on my Raspberry Pi, and forwarded the RPIs local IP address to the http port. In this way, I can access the Django server from the outside world by simply typing my home's IP adress on a web browser. I've been sporadically testing this and there has not beed a single time where I couldn't access the Django server :-)
The thing is that today I wanted to SSH my Pi, and when I introduced the password I got "SSH: Permission denied, please try again" together with sometimes "Permission denied (publickey password). Hell, I have not changed the password! Anyway, I booted to single user mode and changed the password. When I totally relieved tried to log in again....damn! I got the same message!
When I then boot the RPi normally, I see how, in the process, inmediately after stating:
zmap is already the newest version. 0 upgraded, 0 newly installed, 0 to remove 1 not upgraded-
The following never ending process starts:
Oct 20 17:54:20.561 [INFO] zmap: output module: csv
But the process gets interrupted by telling me that some hosts have permanently been added? Is my little computer being hacked?
Then the process starts over and over, sometimes reaching 100%, but even though starting again. I even get a message from some NCDev/PLUR stating:
WELCOME TO NCDEV. This is a secured computer network and only authorized users are allowed. If you are not an authorized user please disconnect inmediately. Note that all connections/IP addresses are subject to review by the system administrator and your connection to this network may result in your connection being probed to maintain the security of this network.
Before I format and reebot my RPi I wanted to ask you guys, if there's anyone that knows what is going on here.