LAN access from remote (6700v3)

> [...] on the router port 1010 was forwarded to 22. So I am not able to
> understand why all these other random ports are alse being redirected to
> my linux box?

   The remote port number is not significant.  If you see a connection
(attempt), then the remote client is talking to the external port in
your port-forwarding rule.  Have you tried an external port other than
1010?

> Initially 22 was the internal port for ssh, I changed it to 2212, but
> the bots are too smart, now i see this in the log!

   No one in the outside world cares about the internal port, either;
only the external port in the port-forwarding rule matters to an
external client.  The only effect of changing the port used on your LAN
would be to make more work for yourself.  I'd return it to 22.

   It's possible that your attackers are trying all possible ports, but
the router will log only the attempts which match a port-forwarding
rule.  (Otherwise, there's no connection to log.)