reikia pagalbos apsaugoti NAS [Darka @ 2014-01-28 12:55:46]

Tema: reikia pagalbos apsaugoti NAS
Autorius: Darka
Data: 2014-01-28 12:55:46

Sveiki,

yra Synology NAS. Pastoviai esu atakuojamas is ivairiu isoriniu IP, 
ivairiais protokolais. Ijungiau Auto Block funkcija (5 attempts within 5 
min), bet tie padlos is karto pakeite strategija ir jungiasi reciau ir po 
maziau kartu.
Pirmus penkis nublokavo dar spalio men. (buvau ramus ir nebetikrinau logu), 
o pasirodo, jais visas blokavimas ir apsiribojo.
Ir kas blogiausia, ne tik bando, bet ir pasijungia. Pvz.:
Information    Connection    2014/01/18 20:28:22    guest    CIFS client 
[guest] from [EQUIPO2(IP:190.79.139.22)] accessed the shared folder [video].
Warning    Connection    2014/01/20 08:29:05    SYSTEM    User [?] from 
[134.147.203.117] failed to log in via [TELNET] due to authorization 
failure.
Information    Connection    2014/01/23 16:25:39    guest    CIFS client 
[guest] from [LUISLENA-PC(IP:95.95.68.19)] accessed the shared folder 
[vaikai].
Information    Connection    2014/01/23 13:45:17    guest    CIFS client 
[guest] from [LUISLENA-PC(IP:95.95.68.19)] accessed the shared folder 
[video].
Information    Connection    2014/01/23 03:54:23    guest    CIFS client 
[guest] from [LUISLENA-PC(IP:95.95.68.19)] accessed the shared folder 
[video].
Information    Connection    2014/01/23 03:54:17    guest    CIFS client 
[guest] from [LUISLENA-PC(IP:95.95.68.19)] accessed the shared folder 
[vaikai]
Warning    Connection    2014/01/26 11:56:27    SYSTEM    User [root] from 
[78.180.210.31] failed to log in via [TELNET] due to authorization failure.
Warning    Connection    2014/01/26 04:24:05    SYSTEM    User [root] from 
[78.175.230.153] failed to log in via [TELNET] due to authorization failure.
Warning    Connection    2014/01/28 10:38:32    SYSTEM    User [root] from 
[201.216.191.174] failed to log in via [TELNET] due to authorization 
failure.
Warning    Connection    2014/01/28 08:22:31    SYSTEM    User [root] from 
[78.187.159.59] failed to log in via [TELNET] due to authorization failure.
Warning    Connection    2014/01/28 07:26:16    SYSTEM    User [?] from 
[134.147.203.117] failed to log in via [TELNET] due to authorization 
failure.
Warning    Connection    2014/01/28 05:29:18    SYSTEM    User [root] from 
[189.204.113.203] failed to log in via [TELNET] due to authorization 
failure.
Warning    Connection    2014/01/28 01:36:37    SYSTEM    User [root] from 
[122.170.0.204] failed to log in via [TELNET] due to authorization failure.
Warning    Connection    2014/01/28 01:21:01    SYSTEM    User [root] from 
[59.149.157.231] failed to log in via [TELNET] due to authorization failure.
Warning    Connection    2014/01/27 21:28:33    SYSTEM    User [root] from 
[5.53.136.16] failed to log in via [TELNET] due to authorization failure.
Warning    Connection    2014/01/27 21:23:25    SYSTEM    User [root] from 
[82.113.40.133] failed to log in via [TELNET] due to authorization failure.


tie kur "failed to log" tai dar tiek to, bet tie kurie pasijunge tai mane 
gasdina, ir ko visai nesuprantu, kad butent is to IP pries tai loguose nera 
jokio skanavimo... Kokiu budu jie taip eme ir atspejo passw?


Darius